Summary
Ein entfernter authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Fortinet FortiAnalyzer und Fortinet FortiManager ausnutzen, um Dateien zu manipulieren, erhöhte Rechte zu erlangen und beliebigen Code auszuführen.
Product
FortiAnalyzer ist eine Plattform zur Protokollverwaltung, Analyse und Berichterstellung.
FortiManager Security Management Appliances ermöglicht die Verwaltung von Fortinet Network Security Geräten.
Vulnerabilities 7
-
High 7.0
A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 a…
-
High 7.0
An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyz…
-
Medium 6.9
A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 throu…
-
Medium 6.7
A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.…
-
Medium 6.5
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer versio…
-
Medium 6.4
An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyz…
-
Medium 5.0
A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through …
Revision history
-
#1
Initiale Fassung
References
-
FortiGuard PSIRT Advisory FG-IR-24-143 vom 2025-01-14
https://www.fortiguard.com/psirt/FG-IR-24-143
-
FortiGuard PSIRT Advisory FG-IR-24-127 vom 2025-01-14
https://www.fortiguard.com/psirt/FG-IR-24-127
-
FortiGuard PSIRT Advisory FG-IR-24-106 vom 2025-01-14
https://www.fortiguard.com/psirt/FG-IR-24-106
-
FortiGuard PSIRT Advisory FG-IR-24-091 vom 2025-01-14
https://www.fortiguard.com/psirt/FG-IR-24-091
-
FortiGuard PSIRT Advisory FG-IR-24-165 vom 2025-01-14
https://www.fortiguard.com/psirt/FG-IR-24-165
-
FortiGuard PSIRT Advisory FG-IR-24-152 vom 2025-01-14
https://www.fortiguard.com/psirt/FG-IR-24-152