Aller au contenu
en Se connecter
6.7 Moyenne

CVE-2022-35844 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management…

Description

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to commands of the certificate import feature.

Produits et versions touchés

Produit Versions touchées Corrigé en
Fortinet FortiTester Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Fortinet FortiTester

Les 8 CVE de Fortinet FortiTester →
CVE-2022-33870 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line… 7.8 Élevée CVE-2022-38372 A hidden functionality vulnerability [CWE-1242] in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0… 6.7 Moyenne CVE-2022-33872 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]… 9.8 Critique CVE-2022-33873 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78]… 6.8 Moyenne
Suivre cette CVE