← CVE Intelligence

CVE-2022-22298

Fortinet / FortiIsolator PUBLISHED

Description (CNA)

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator version 1.0.0, FortiIsolator version 1.1.0, FortiIsolator version 1.2.0 through 1.2.2, FortiIsolator version 2.0.0 through 2.0.1, FortiIsolator version 2.1.0 through 2.1.2, FortiIsolator version 2.2.0, FortiIsolator version 2.3.0 through 2.3.4 allows attacker to execute arbitrary OS commands in the underlying shell via specially crafted input parameters.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiIsolatoraffected 2.3.0 through 2.3.3; affected 2.2.0; affected 2.1.0 through 2.1.2; affected 2.0.0 through 2.0.1; affected 1.2.0 through 1.2.2; affected 1.1.0; affected 1.0.0

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.