Description (CNA)
A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows inject Javascript code and HTML tags through the CN value of CA and CRL certificates via the import CA and CRL certificates feature.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / Fortinet FortiManager, FortiAnalyzer | affected FortiManager 6.0.0, 5.6.4 and below versions; FortiAnalyzer 6.0.0, 5.6.4 and below versions |
CWE
No CWE identifiers supplied.
References
- https://fortiguard.com/advisory/FG-IR-17-305
- http://www.securitytracker.com/id/1041246
- http://www.securitytracker.com/id/1041247
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.