Description (CNA)
A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4.0 through 7.4.7, FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.2 through 7.0.16, FortiSwitchManager 7.2.1 through 7.2.5 allows attackers to escalate their privilege via specially crafted http requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fortinet / FortiPAM | affected 1.5.0; affected 1.4.0 through 1.4.2; affected 1.3.0 through 1.3.1; affected 1.2.0; affected 1.1.0 through 1.1.2; affected 1.0.0 through 1.0.3 |
| Fortinet / FortiOS | affected 7.6.0 through 7.6.2; affected 7.4.0 through 7.4.6; affected 7.2.0 through 7.2.10; affected 7.0.2 through 7.0.16 |
| Fortinet / FortiSRA | affected 1.5.0; affected 1.4.0 through 1.4.2 |
| Fortinet / FortiProxy | affected 7.6.0 through 7.6.1; affected 7.4.0 through 7.4.7 |
| Fortinet / FortiSwitchManager | affected 7.2.1 through 7.2.5 |
CWE
CWE-122
References
ADP enrichment
No English description supplied.
No references supplied.