CVE-2019-15710 — Fortinet / FortiExtender

CVE-2019-15710

Fortinet / FortiExtender PUBLISHED

Description (CNA)

An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted "execute date" commands.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiExtender	affected 4.1.0 to 4.1.1; affected 4.0.0 and below

CWE

No CWE identifiers supplied.

References

https://fortiguard.com/psirt/FG-IR-19-273

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/psirt/FG-IR-19-273

CISA-ADP

No English description supplied.

No references supplied.