Skip to content
OpenAdvisories
Unscored CVE-2019-15710 EUVD-2019-6646GHSA-qwvq-972q-36q5

An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow unauthorized admin…

Published Oct 31, 2019 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: FortiExtender Category: Network devices

Description

An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted "execute date" commands.

Affected products

VendorProductAffectedFixed
Fortinet FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below —

References