Threats tagged 'ghsa-536v-44r6-f75w'

An OS command injection vulnerability exists in multiple versions of Fortinet FortiAnalyzer and FortiManager products, including their cloud variants. This flaw allows an authenticated attacker to execute unauthorized OS commands via a crafted HTTP request. The vulnerability affects FortiAnalyzer versions 7.2 all versions, 7.4.0 through 7.4.11, 7.6.0 through 7.6.7, and 8.0.0, as well as FortiManager versions 7.2 all versions, 7.4.0 through 7.4.11, 7.6.0 through 7.6.7, and 8.0.0, including their respective cloud versions. The CVSS v3.1 base score is 7.2, indicating a high severity impact with high confidentiality, integrity, and availability impact. No patch or remediation information is provided in the source data.