mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
169 lines
7.5 KiB
JSON
169 lines
7.5 KiB
JSON
{
|
|
"data_version": "4.0",
|
|
"data_type": "CVE",
|
|
"data_format": "MITRE",
|
|
"CVE_data_meta": {
|
|
"ID": "CVE-2023-26210",
|
|
"ASSIGNER": "psirt@fortinet.com",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Multiple improper neutralization of special elements used in an os command ('OS Command Injection') vulnerabilties [CWE-78] in Fortinet FortiADCManager version 7.1.0 and before 7.0.0, FortiADC version 7.2.0 and before 7.1.2 allows a local authenticated attacker to execute arbitrary shell code as `root` user via crafted CLI requests."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Execute unauthorized code or commands",
|
|
"cweId": "CWE-78"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"vendor_name": "Fortinet",
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "FortiADCManager",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "7.1.0"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "7.0.0"
|
|
},
|
|
{
|
|
"version_affected": "<=",
|
|
"version_name": "6.2.0",
|
|
"version_value": "6.2.1"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.1.0"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "6.0.0"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "5.4.0"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "5.3.0"
|
|
},
|
|
{
|
|
"version_affected": "<=",
|
|
"version_name": "5.2.0",
|
|
"version_value": "5.2.1"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"product_name": "FortiADC",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "7.2.0"
|
|
},
|
|
{
|
|
"version_affected": "<=",
|
|
"version_name": "7.1.0",
|
|
"version_value": "7.1.1"
|
|
},
|
|
{
|
|
"version_affected": "<=",
|
|
"version_name": "7.0.0",
|
|
"version_value": "7.0.5"
|
|
},
|
|
{
|
|
"version_affected": "<=",
|
|
"version_name": "6.2.0",
|
|
"version_value": "6.2.6"
|
|
},
|
|
{
|
|
"version_affected": "<=",
|
|
"version_name": "6.1.0",
|
|
"version_value": "6.1.6"
|
|
},
|
|
{
|
|
"version_affected": "<=",
|
|
"version_name": "6.0.0",
|
|
"version_value": "6.0.4"
|
|
},
|
|
{
|
|
"version_affected": "<=",
|
|
"version_name": "5.4.0",
|
|
"version_value": "5.4.5"
|
|
},
|
|
{
|
|
"version_affected": "<=",
|
|
"version_name": "5.3.0",
|
|
"version_value": "5.3.7"
|
|
},
|
|
{
|
|
"version_affected": "<=",
|
|
"version_name": "5.2.0",
|
|
"version_value": "5.2.8"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"url": "https://fortiguard.com/psirt/FG-IR-23-076",
|
|
"refsource": "MISC",
|
|
"name": "https://fortiguard.com/psirt/FG-IR-23-076"
|
|
}
|
|
]
|
|
},
|
|
"solution": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Please upgrade to FortiADC version 7.2.1 or above\r\nPlease upgrade to FortiADC version 7.1.3 or above\r\nPlease upgrade to FortiADCManager version 7.2.0 or above\r\nPlease upgrade to FortiADCManager version 7.1.1 or above\r\nPlease upgrade to FortiADCManager version 7.0.1 or above"
|
|
}
|
|
],
|
|
"impact": {
|
|
"cvss": [
|
|
{
|
|
"version": "3.1",
|
|
"attackComplexity": "LOW",
|
|
"attackVector": "LOCAL",
|
|
"availabilityImpact": "HIGH",
|
|
"baseScore": 7.8,
|
|
"baseSeverity": "HIGH",
|
|
"confidentialityImpact": "HIGH",
|
|
"integrityImpact": "HIGH",
|
|
"privilegesRequired": "LOW",
|
|
"scope": "UNCHANGED",
|
|
"userInteraction": "NONE",
|
|
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:C"
|
|
}
|
|
]
|
|
}
|
|
} |