An SQL injection vulnerability exists in Fortinet FortiAuthenticator versions 6.6.0 through 6.6.10 and 8.0.0 through 8.0.3. This flaw allows an authenticated attacker to execute unauthorized code or commands via crafted HTTP requests. The vulnerability is classified as high severity with a CVSS score of 8.3.
A null pointer dereference vulnerability exists in Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. This flaw may allow an unauthenticated attacker to cause a denial of service (DoS) by sending crafted HTTP requests. The vulnerability does not impact confidentiality or integrity but results in service disruption.
A critical authentication bypass vulnerability exists in Fortinet FortiOS versions 8.0.0 through 8.0.1, 7.6.0 through 7.6.7, 7.4.0 through 7.4.12, and 7.2.0 through 7.2.13. This flaw may allow an unauthenticated attacker to broadcast Link State Advertisements (LSA) via specially crafted requests, potentially impacting system integrity and availability.
An insufficiently protected credentials vulnerability exists in Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. This flaw may allow an unauthenticated attacker to obtain sensitive information via HTTPS requests. The vulnerability has a high severity rating with a CVSS score of 7.5. No public exploits or patches are currently documented.
A numeric truncation error vulnerability exists in Fortinet FortiOS versions 7.2.0 through 7.2.13, 7.4.0 through 7.4.12, 7.6.0 through 7.6.7, and 8.0.0 through 8.0.1. This flaw may allow a configured iBGP neighbor to send malicious or malformed attributes that could impact all connected routers via a specially crafted request.
A format string vulnerability exists in Fortinet FortiAuthenticator versions 6.6.0 through 6.6.10 and 8.0.0 through 8.0.3. This flaw allows an authenticated privileged attacker to execute unauthorized code or commands via crafted HTTP requests. The vulnerability is classified as high severity with a CVSS score of 7.2.
An improper privilege management vulnerability exists in Fortinet FortiAuthenticator versions 6.6.0 through 6.6.10 and 8.0.0 through 8.0.3. This flaw may allow an authenticated attacker to escalate their privileges within the affected systems. The vulnerability has a high severity rating with a CVSS score of 7.2.
An out-of-bounds read vulnerability exists in multiple versions of Fortinet FortiOS, including 8.0.0 through 8.0.1, 7.6.0 through 7.6.7, and all versions of 7.4, 7.2, and 7.0. This flaw may allow a remote attacker without privileges to execute arbitrary code or commands by sending specially crafted packets.
A path traversal vulnerability exists in Fortinet FortiOS versions 7.2.0 through 7.2.13, 7.4.0 through 7.4.12, 7.6.0 through 7.6.7, and 8.0.0 through 8.0.1, as well as all versions of FortiPAM 1.0 through 1.6. This flaw may allow an unauthenticated attacker to bypass authentication by using specially crafted credentials.
A hard-coded password vulnerability exists in Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. This flaw may allow an unauthenticated attacker to bypass credential validation under certain conditions, potentially leading to unauthorized access.
An out-of-bounds write vulnerability exists in Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. This flaw may allow an unauthenticated attacker to execute unauthorized code or commands via HTTP requests if they can bypass ASLR protections. The vulnerability has a high severity rating with a CVSS score of 8.1.
An incorrect authorization vulnerability exists in Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. This flaw may allow an attacker to bypass authentication mechanisms and gain unauthorized access to the system.
An incorrect authorization vulnerability exists in Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. This flaw may allow an unauthenticated attacker to cause a denial of service (DoS) via crafted HTTP requests.
A path traversal vulnerability exists in Fortinet FortiAnalyzer and FortiManager products, including their cloud versions, across multiple 7.x and 8.x releases. This flaw allows an authenticated administrator to write arbitrary files via a specially crafted archive. The vulnerability affects versions from 7.2.x through 8.0.1 in various sub-versions. It has a high severity rating with a CVSS score of 7.2, indicating significant potential impact on confidentiality, integrity, and availability.
An incorrect authorization vulnerability exists in Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. This flaw may allow an attacker to bypass authentication controls and gain unauthorized access. However, full impersonation requires the attacker to have obtained certain IDs and data through other means.
An OS command injection vulnerability exists in multiple versions of Fortinet FortiAnalyzer and FortiManager products, including their cloud variants. This flaw allows an authenticated attacker to execute unauthorized commands via specially crafted HTTP requests. The vulnerability affects versions from 7.2.0 through 8.0.1 across these products. It has a high severity rating with a CVSS score of 7.2.
A stack-based buffer overflow vulnerability exists in Fortinet FortiAuthenticator versions 6.6.0 through 6.6.10 and 8.0.0 through 8.0.3. This flaw may allow an unauthenticated attacker to cause a denial of service by crashing the FSSO subsystem via specially crafted HTTP requests.
An unrestricted file upload vulnerability exists in Fortinet FortiAnalyzer and FortiManager products, including their cloud versions, across multiple versions. This flaw allows an authenticated administrator to upload arbitrary files via specially crafted requests, potentially leading to full compromise of confidentiality, integrity, and availability. The vulnerability affects FortiAnalyzer versions 7.2.0 through 8.0.1 and FortiManager versions 7.2.0 through 8.0.1, including corresponding cloud versions. The CVSS score is 7.2, indicating high severity.
An improper neutralization of special elements vulnerability exists in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer Cloud 8.0.0, FortiManager 8.0.0, and FortiManager Cloud 8.0.0. This flaw may allow an authenticated attacker with restricted privileges to execute unauthorized code or commands via a specially crafted request. The vulnerability has a high severity rating with a CVSS score of 7.2.
An improper certificate validation vulnerability exists in multiple versions of Fortinet FortiAnalyzer and FortiManager products, including their cloud variants. This flaw may allow a man-in-the-middle (MITM) attacker to impersonate a RADIUS server by presenting a rogue RADIUS server certificate. The vulnerability affects FortiAnalyzer versions 8.0.0 through 8.0.1, 7.6.0 through 7.6.7, 7.4.0 through 7.4.11, and all versions of 7.2, as well as corresponding FortiAnalyzer Cloud versions. Similarly, FortiManager versions 8.0.0 through 8.0.1, 7.6.0 through 7.6.7, 7.4.0 through 7.4.11, and all versions of 7.2, including their cloud variants, are affected. The vulnerability is identified as CWE-295 and has a CVSS v3.1 base score of 7.5 (high severity). No public exploits or patches are currently documented.