FortiManagerに認証不要のコード実行の脆弱性、修正版あり
Summary
FortiManagerに、認証なしでFGFM用のポートへ届く相手がコードやコマンドを実行できる脆弱性が見つかり、修正版が出ました。FGFMポートの到達範囲を確認し、7.2.9・7.4.6・7.6.8・8.0.1以降へ更新してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
FortiManagerに、認証なしでFGFM用のポートへ届く相手がコードやコマンドを実行できる脆弱性が見つかり、修正版が出ました。FGFMポートの到達範囲を確認し、7.2.9・7.4.6・7.6.8・8.0.1以降へ更新してください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| FortinetFortiManager |
7.6.0 – 7.6.7→ Not listed 7.4.0 – 7.4.5→ Not listed 7.2.0 – 7.2.8→ Not listed |
Not listed Not listed Not listed |
This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.
Original description The description as published by the source.
A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.8 may allow an unauthenticated attacker that can reach the FGFM port to execute code or commands via crafted FGFM packets.
Source: CVE.org (CVE Program・cvelistV5) NVD