Podatność CVE-2023-41842
Publikacja: 2024-03-12

Opis:
A use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiManager version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.3 and before 7.0.10, Fortinet FortiAnalyzer version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.3 and before 7.0.10, Fortinet FortiAnalyzer-BigData before 7.2.5 and Fortinet FortiPortal version 6.0 all versions and version 5.3 all versions allows a privileged attacker to execute unauthorized code or commands via specially crafted command arguments.

Typ:

CWE-134

 (Uncontrolled Format String)

 Referencje:
https://fortiguard.com/psirt/FG-IR-23-304
Copyright 2024, cxsecurity.com

 

Back to Top