CVE-2023-42788
Summary
| CVE | CVE-2023-42788 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2023-10-10 17:15:00 UTC |
|---|
| Updated | 2023-11-07 04:21:00 UTC |
|---|
| Description | An improper neutralization of special elements used in an os command ('OS Command Injection') vulnerability [CWE-78] in FortiManager & FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.8, version 6.4.0 through 6.4.12 and version 6.2.0 through 6.2.11 may allow a local attacker with low privileges to execute unauthorized code via specifically crafted arguments to a CLI command |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Fortinet FortiManager - Command Injection (CVE-2023-42788) · Advisory · orangecertcc/security-research · GitHub |
MISC |
github.com |
|
| PSIRT Advisories | FortiGuard |
MISC |
fortiguard.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 378940 Fortinet FortiAnalyzer and FortiManager - OS Command Injection Vulnerability (FG-IR-23-167)
