Threats tagged 'ghsa-6vmm-qwfm-fxp2'

A format string vulnerability exists in Fortinet FortiAnalyzer and FortiManager products, including their cloud versions, across multiple 7.x and 8.x releases. This vulnerability allows an authenticated attacker to execute unauthorized commands via specially crafted HTTP requests. The flaw affects versions 7.2.0 through 7.2.12, 7.4.0 through 7.4.11, 7.6.0 through 7.6.7, and 8.0.0 through 8.0.1 for both FortiAnalyzer and FortiManager, including their cloud variants.