Aller au contenu
en Se connecter
7.2 Élevée

CVE-2022-27483 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager…

Description

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager version 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.x and 6.0.x and FortiAnalyzer version 7.0.0 through 7.0.3, version 6.4.0 through 6.4.7, 6.2.x and 6.0.x allows attacker to execute arbitrary shell code as `root` user via `diagnose system` CLI commands.

Produits et versions touchés

Produit Versions touchées Corrigé en
Fortinet FortiManager, FortiAnalyzer Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Fortinet FortiManager, FortiAnalyzer

Les 5 CVE de Fortinet FortiManager, FortiAnalyzer →
CVE-2022-22300 A improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5.6.0 through 5.6.11,… 4.3 Moyenne CVE-2021-36170 An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and… 3.2 Faible CVE-2020-12811 A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet may allow… 4.9 Moyenne CVE-2017-17541 A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer… Non notée
Suivre cette CVE