Description (CNA)
A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earlier allows attacker a limited, unauthorized file access via specifically crafted request in inter-server communication port.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiNAC | affected 9.4.0 through 9.4.3; affected 7.2.0 through 7.2.1 |
CWE
CWE-77
References
ADP enrichment
No English description supplied.
No references supplied.