説明
A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.1, FortiProxy 7.2.0 through 7.2.7, FortiProxy 7.0.0 through 7.0.13 allows a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests.
AI分析AIによる分析
影響を受ける製品
fortinetfortios
fortinetfortios
fortinetfortios
7.4.0
fortinetfortipam
fortinetfortiproxy
fortinetfortiproxy
fortinetfortiproxy
参照
- https://fortiguard.fortinet.com/psirt/FG-IR-23-209Vendor Advisory