Skip to content
fr Sign in
6.5 Medium

CVE-2023-36642 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management…

Description

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiTester 3.0.0 through 7.2.3 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

Affected products and versions

Product Affected versions Fixed in
FortiTester 7.2 7.2.0 → 7.2.3 No fix stated
FortiTester 7.1 7.1.0 → 7.1.1 No fix stated
FortiTester 7.0.0 No fix stated
FortiTester 4.2 4.2.0 → 4.2.1 No fix stated
FortiTester 4.1 4.1.0 → 4.1.1 No fix stated
FortiTester 4.0.0 No fix stated
FortiTester 3.9 3.9.0 → 3.9.2 No fix stated
FortiTester 3.8.0 No fix stated
FortiTester 3.7 3.7.0 → 3.7.1 No fix stated
Show the 7 other branches
Product Affected versions Fixed in
FortiTester 3.6.0 No fix stated
FortiTester 3.5 3.5.0 → 3.5.1 No fix stated
FortiTester 3.4.0 No fix stated
FortiTester 3.3 3.3.0 → 3.3.1 No fix stated
FortiTester 3.2.0 No fix stated
FortiTester 3.1.0 No fix stated
FortiTester 3.0.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiTester

The 7 CVEs of FortiTester →
CVE-2024-47569 A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail… 4.2 Medium CVE-2022-23439 A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison… 4.1 Medium CVE-2023-40716 An improper neutralization of special elements used in an OS command vulnerability [CWE-78]  in the command line… 6.5 Medium CVE-2023-40715 A cleartext storage of sensitive information vulnerability [CWE-312] in FortiTester 2.3.0 through 7.2.3 may allow an… 5.2 Medium
Track this CVE