Summary
Fortinet heeft meerdere kwetsbaarheden verholpen in FortiManager en FortiAnalyzer, inclusief hun cloudversies en aanverwante producten zoals FortiManager Cloud, FortiAnalyzer Cloud, FortiAnalyzer-BigData, FortiSASE-Sovereign en FortiSASE-Sovereign GUI.
Details
Interpretaties
De kwetsbaarheden betreffen diverse beveiligingsproblemen in Fortinet FortiManager en FortiAnalyzer producten, waaronder path traversal, improper encoding of escaping, extern gecontroleerde format string, SQL-injectie, XML-injectie, heap- en stack-based buffer overflows, OS command injection, privilege escalation, authorization bypass, argument injection, unrestricted file upload, server-side template injection, out-of-bounds write, en improper certificate validation binnen het RADIUS-protocol.
Deze kwetsbaarheden kunnen door een aanvaller worden misbruikt om, afhankelijk van de specifieke kwetsbaarheid, ongeautoriseerde code of commando's uit te voeren, bestanden te lezen, schrijven of verwijderen, privileges te escaleren, authenticatie te omzeilen, configuraties te manipuleren, en denial-of-service te veroorzaken. Sommige kwetsbaarheden vereisen authentificatie met verschillende privilege niveaus, variërend van read-only gebruikers tot geauthenticeerde beheerders, terwijl andere ook misbruikt kunnen worden door niet-geauthenticeerde aanvallers.
De kwetsbaarheden zijn aanwezig in zowel on-premises als cloudversies van de FortiManager en FortiAnalyzer producten en beïnvloeden belangrijke netwerkbeheer- en beveiligingsanalysefuncties. Exploitatie kan leiden tot compromittering van systeemintegriteit, controle over beheerde apparaten, en verstoring van netwerkbeheerprocessen. Specifieke aanvalsvectoren omvatten het verzenden van speciaal vervaardigde HTTP/HTTPS-requests, JSON-RPC-requests, OFTP-pakketten, en manipulatie van GUI-interfaces en template engines.
Oplossingen
Fortinet heeft updates uitgebracht om de kwetsbaarheden in FortiManager en FortiAnalyzer, inclusief hun cloudvarianten, te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Vulnerabilities 42
-
Critical 9.8CVE-2026-126170 Public exploit
A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.…
-
Critical 9.3
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiA…
-
Critical 9.1
A authorization bypass through user-controlled key vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAn…
-
Critical 9.0
A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7…
-
High 8.8
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiA…
-
High 8.7
A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiMan…
-
High 8.7
A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.…
-
High 8.4
A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiManager 8.0.0 th…
-
High 8.2
A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 th…
-
High 8.2
A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.…
-
High 8.2
A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiMan…
-
High 8.1
A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through …
-
High 8.1
A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through …
-
High 8.0
A use of hard-coded credentials vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through …
-
High 7.5
A improper certificate validation vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 thro…
-
High 7.3
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyz…
-
High 7.2
A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer…
-
High 7.2
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7…
-
High 7.2
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
High 7.2
A improper control of generation of code ('code injection') vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1,…
-
High 7.2
A improper control of generation of code ('code injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1…
-
High 7.2
A improper privilege management vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.1 throug…
-
High 7.2
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7…
-
High 7.2
A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 th…
-
High 7.2
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyze…
-
High 7.2
A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in F…
-
High 7.2
A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in F…
-
High 7.2
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyze…
-
High 7.2
A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through …
-
High 7.2
A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiAna…
-
High 7.2
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
High 7.2
A unintended proxy or intermediary ('confused deputy') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, For…
-
High 7.2
A out-of-bounds write vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, F…
-
High 7.2
A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer…
-
High 7.2
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
High 7.2
A unrestricted upload of file with dangerous type vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAna…
-
High 7.2
A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiAnalyzer 8.0.0, …
-
High 7.2
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyze…
-
High 7.2
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
High 7.1
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiA…
-
High 7.1
A missing authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.7, FortiAnalyzer…
-
Low 3.8
A improper privilege management vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiMa…
Revision history
-
#1.0.0
Initiele versie
References
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-190
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-219
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-220
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-221
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-222
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-223
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-224
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-225
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-226
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-227
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-228
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-229
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-230
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-231
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-232
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-233
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-234
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-235
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-236
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-237
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-238
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-239
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-240
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-241
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-242
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-243
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-244
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-245
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-246
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-247
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-248
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-249
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-250
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-251
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-274
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-275
-
Reference
https://fortiguard.fortinet.com/psirt/FG-IR-26-276