Description (CNA)
A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.1, FortiProxy 7.2.0 through 7.2.7, FortiProxy 7.0.0 through 7.0.13 allows a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiProxy | affected 7.4.0 through 7.4.1; affected 7.2.0 through 7.2.7; affected 7.0.0 through 7.0.13 |
| Fortinet / FortiOS | affected 7.4.0; affected 7.2.0 through 7.2.5; affected 7.0.0 through 7.0.12; affected 6.4.0 through 6.4.16 |
| Fortinet / FortiPAM | affected 1.1.0 through 1.1.2; affected 1.0.0 through 1.0.3 |
CWE
CWE-415
References
ADP enrichment
No English description supplied.
No references supplied.