Summary
Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiManager ausnutzen, um Daten zu manipulieren, Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, und Code auszuführen.
Product
FortiManager Security Management Appliances ermöglicht die Verwaltung von Fortinet Network Security Geräten.
Vulnerabilities 5
-
High 8.4
A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiManager versi…
-
High 8.3
A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions…
-
High 7.9
An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker…
-
High 7.2
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
Medium 5.2
A relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 …
Revision history
-
#1
Initiale Fassung
References
-
FortiGuard PSIRT Advisory FG-IR-24-097 vom 2025-01-14
https://www.fortiguard.com/psirt/FG-IR-24-097
-
FortiGuard PSIRT Advisory FG-IR-24-135 vom 2025-01-14
https://www.fortiguard.com/psirt/FG-IR-24-135
-
FortiGuard PSIRT Advisory FG-IR-24-222 vom 2025-01-14
https://www.fortiguard.com/psirt/FG-IR-24-222
-
FortiGuard PSIRT Advisory FG-IR-24-239 vom 2025-01-14
https://www.fortiguard.com/psirt/FG-IR-24-239
-
FortiGuard PSIRT Advisory FG-IR-24-463 vom 2025-01-14
https://www.fortiguard.com/psirt/FG-IR-24-463