Summary
Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiAnalyzer und Fortinet FortiManager ausnutzen, um seine Privilegien zu erhöhen, Code auszuführen, Sicherheitsmaßnahmen zu umgehen und Informationen offenzulegen.
Product
FortiAnalyzer ist eine Plattform zur Protokollverwaltung, Analyse und Berichterstellung.
FortiManager Security Management Appliances ermöglicht die Verwaltung von Fortinet Network Security Geräten.
Vulnerabilities 5
-
Medium 6.8
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3…
-
Medium 6.5
A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer…
-
Medium 6.4
A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, …
-
Medium 6.3
A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 thro…
-
Low 3.4
An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.…
Revision history
-
#1
Initiale Fassung
References
-
FortiGuard PSIRT Advisory FG-IR-26-081 vom 2026-03-10
https://www.fortiguard.com/psirt/FG-IR-26-081
-
FortiGuard PSIRT Advisory FG-IR-26-078 vom 2026-03-10
https://www.fortiguard.com/psirt/FG-IR-26-078
-
FortiGuard PSIRT Advisory FG-IR-26-092 vom 2026-03-10
https://www.fortiguard.com/psirt/FG-IR-26-092
-
FortiGuard PSIRT Advisory FG-IR-26-090 vom 2026-03-10
https://www.fortiguard.com/psirt/FG-IR-26-090
-
FortiGuard PSIRT Advisory FG-IR-26-079 vom 2026-03-10
https://www.fortiguard.com/psirt/FG-IR-26-079