8.6
Élevée
CVE-2024-55590 Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities…
Description
Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiIsolator version 2.4.0 through 2.4.5 allows an authenticated attacker with at least read-only admin permission and CLI access to execute unauthorized code via specifically crafted CLI commands.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiIsolator 2.4 | 2.4.0 → 2.4.5 | Pas de correctif indiqué |
Références
- fortiguard.fortinet.com fortiguard.fortinet.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de FortiIsolator
Les 7 CVE de FortiIsolator →
CVE-2024-33507
An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization vulnerability [CWE-863] in…
7.0
Élevée
CVE-2024-32124
An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions…
4.0
Moyenne
CVE-2024-27779
An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version…
6.3
Moyenne
CVE-2024-54024
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
7.0
Élevée