CVE-2022-26117

概要

参考情報

• fortiguard.com/psirt/FG-IR-22-058 · Patch
• orangecertcc/security-research security advisory · Third Party Advisory

fortinac のその他の脆弱性

• CVE-2023-33300中 5.3A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earl…
• CVE-2024-31488緊急 9.0An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 throug…
• CVE-2023-26206中 6.1An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 - 9.4.2, 9.2.0 - 9.2.8, 9…
• CVE-2023-33299緊急 9.8A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions of 8.x allows attack…
• CVE-2023-22633高 7.5An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and be…