FortiManager / FortiAnalyzer - OS command injection | allinfosecnews.com

Oct. 10, 2023, 7 a.m. |

FortiGuard Labs | FortiGuard Center - IR Advisories fortiguard.fortinet.com

An improper neutralization of special elements used in an os command ('OS Command Injection') vulnerability [CWE-78] in FortiManager & FortiAnalyzer may allow a local attacker with low privileges to execute unauthorized code via specifically crafted arguments to a CLI command

amp attacker cli code command command injection cwe fortianalyzer fortimanager injection local low may privileges special vulnerability

More from fortiguard.fortinet.com / FortiGuard Labs | FortiGuard Center - IR Advisories

FortiAuthenticator - Open Redirect on /portal/disclaimer 3 days, 23 hours ago | fortiguard.fortinet.com

attacker cwe disclaimer may +8

Exposure of password hashes to read-only admin 3 days, 23 hours ago | fortiguard.fortinet.com

admin control cwe data +11

Double free with double usage of json_object_put 3 days, 23 hours ago | fortiguard.fortinet.com

attacker code commands cwe +9

Format String Bug in cli command 3 days, 23 hours ago | fortiguard.fortinet.com

amp arbitrary code arbitrary code execution attacker +19

Client IP relies on X-Forwarded-For and other headers 3 days, 23 hours ago | fortiguard.fortinet.com

attack bypass client cwe +10

Buffer overflow in administrative interface 3 days, 23 hours ago | fortiguard.fortinet.com

arbitrary code attacker buffer buffer overflow +13

Code injection in playbook code snippet step 3 days, 23 hours ago | fortiguard.fortinet.com

arbitrary code attacker code code injection +7

Client-side enforcement of server-side security related to customer reports features 3 days, 23 hours ago | fortiguard.fortinet.com

access account attacker client +16

HTTP/2 CONTINUATION Frames Vulnerability 3 days, 23 hours ago | fortiguard.fortinet.com

attack can connection crash +14

Information Security Engineers

@ D. E. Shaw Research | New York City

View on infosec-jobs.com

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada

View on infosec-jobs.com

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA

View on infosec-jobs.com

Senior Application Security Engineer, Application Security

@ Miro | Amsterdam, NL

View on infosec-jobs.com

SOC Analyst (m/w/d)

@ LANXESS | Leverkusen, NW, DE, 51373

View on infosec-jobs.com

Lead Security Solutions Engineer (Remote, North America)

@ Dynatrace | Waltham, MA, United States

View on infosec-jobs.com