CVE-2024-35275 — Fortinet / FortiManager

CVE-2024-35275

Fortinet / FortiManager PUBLISHED

Description (CNA)

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, FortiManager version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiManager	affected 7.4.0 through 7.4.2
Fortinet / FortiAnalyzer	affected 7.4.0 through 7.4.3

CWE

CWE-89

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-091

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.