Aller au contenu
en Se connecter
7.8 Élevée

CVE-2022-33870 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line…

Description

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line interpreter of FortiTester 3.0.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.

Produits et versions touchés

Produit Versions touchées Corrigé en
Fortinet FortiTester Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Fortinet FortiTester

Les 8 CVE de Fortinet FortiTester →
CVE-2022-38372 A hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0… 6.7 Moyenne CVE-2022-33872 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]… 9.8 Critique CVE-2022-33873 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]… 6.8 Moyenne CVE-2022-33874 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]… 9.8 Critique
Suivre cette CVE