Yüksek CVSS 8.2
CVE-2022-42476: Fortiproxy: güvenlik açığı
Açıklama (NVD)
A relative path traversal vulnerability [CWE-23] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.8, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.12, FortiProxy 7.2.0 through 7.2.1, FortiProxy 7.0.0 through 7.0.7, FortiProxy 2.0.0 through 2.0.11, FortiProxy 1.2 all versions, FortiProxy 01.02 all versions, FortiProxy 1.1 all versions, FortiProxy 01.01 all versions allows privileged VDOM administrators to escalate their privileges to super admin of the box via crafted CLI requests.
Özet bilgiler
- Ürün
- Fortinet Fortiproxy
- CVSS v3.1
- 8.2
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - EPSS
- %0,22 (yüzdelik 12)
- CWE
- CWE-23
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| fortinet-fortiproxy | 1.1.0 | 1.1.6 | — |
| fortinet-fortiproxy | 1.2.0 | 1.2.13 | — |
| fortinet-fortiproxy | 2.0.0 | 2.0.11 | — |
| fortinet-fortiproxy | 7.0.0 | 7.0.7 | — |
| fortinet-fortiproxy | 7.2.0 | 7.2.0 | — |
| fortinet-fortiproxy | 7.2.1 | 7.2.1 | — |
| fortinet-fortios | 6.2.0 | 6.2.12 | — |
| fortinet-fortios | 6.4.0 | 6.4.11 | — |
| fortinet-fortios | 7.0.0 | 7.0.8 | — |
| fortinet-fortios | 7.2.0 | 7.2.3 | — |