DeutschShown in its original language — a full translation is planned for a future version.
Fortinet FortiAnalyzer und FortiManager: Mehrere Schwachstellen
view advisory published 2025-01-14
Ein entfernter authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Fortinet FortiAnalyzer und Fortinet FortiManager ausnutzen, um Dateien zu manipulieren, erhöhte Rechte zu erlangen und beliebigen Code auszuführen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-45331US | high7.8 | — | ||
A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 a… | ||||
| CVE-2024-36512US | high7.2 | — | ||
An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer 7.4.0 through 7.4.3 and 7.2.0 through 7.2.5 and 7.0.2 thro… | ||||
| CVE-2024-35276US | critical9.8 | — | ||
A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0.0 through 7.0.12, FortiAnalyzer 6.4.… | ||||
| CVE-2024-35275US | high8.8 | — | ||
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, FortiManager version 7.4.0 through 7.4… | ||||
| CVE-2024-35273US | high8.8 | — | ||
A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially craft… | ||||
| CVE-2024-33503US | high7.8 | — | ||
A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2.1 through 7.2.5, FortiManager Cloud 7.0 all versions, Forti… | ||||
| CVE-2024-33502US | high7.2 | — | ||
An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer versions 7.4.0 through 7.4.2 and 7.2.0 through 7.2.5 and 7… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2025-0096 - CSAF Versionself
- WID-SEC-2025-0096 - Portal Versionself
- FortiGuard PSIRT Advisory FG-IR-24-091 vom 2025-01-14external
- FortiGuard PSIRT Advisory FG-IR-24-106 vom 2025-01-14external
- FortiGuard PSIRT Advisory FG-IR-24-127 vom 2025-01-14external
- FortiGuard PSIRT Advisory FG-IR-24-143 vom 2025-01-14external
- FortiGuard PSIRT Advisory FG-IR-24-152 vom 2025-01-14external
- FortiGuard PSIRT Advisory FG-IR-24-165 vom 2025-01-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan