CVE-2024-54025

概要

参考情報

• fortiguard.fortinet.com/psirt/FG-IR-24-392 · Vendor Advisory

fortiisolator のその他の脆弱性

• CVE-2024-33507緊急 9.1An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization vulnerability [CWE-863] in FortiIsolator 2.4.0 thr…
• CVE-2024-32124中 4.3An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may all…
• CVE-2024-27779中 6.7An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version 4.2.6 and below, 4.…
• CVE-2024-54024高 7.2An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsolat…
• CVE-2024-55590高 8.8Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet For…