Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain the usernames and passwords of users of the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition: versions 1.1.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/01/tibco-security-advisory-february-15-2022-tibco-bcce-2021-43049
CVE ID: CVE-2021-43050 State: PUBLISHED Published: 2022-02-15T17:55:12.755729Z Last Updated: 2024-09-17T00:06:19.636Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO BusinessConnect Container Edition Problem Types: Successful execution of this vulnerability can result in an attacker gaining full administrative access to the components of the affected system. Description: The Auth Server component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with local access to obtain administrative usernames and passwords for the affecte
at allows an unauthenticated attacker with local access to obtain administrative usernames and passwords for the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition: versions 1.1.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/01/tibco-security-advisory-february-15-2022-tibco-bcce-2021-43050
CVE ID: CVE-2021-43051 State: PUBLISHED Published: 2021-12-14T19:20:10.307673Z Last Updated: 2024-09-16T21:09:03.934Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Server Problem Types: In the worst case, if the user is a privileged administrator, successful execution of these vulnerabilities can result in an attacker gaining full administrative access to the affected system. Description: The Spotfire Server component of TIBCO Software Inc.'s TIBCO Spotfire Server, TIBCO Spotfire Server, and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows malicious custom API clients with network ac
O Spotfire Server contains a difficult to exploit vulnerability that allows malicious custom API clients with network access to execute internal API operations outside of the scope of those granted to it. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Server: versions 10.10.6 and below, TIBCO Spotfire Server: versions 11.0.0, 11.1.0, 11.2.0, 11.3.0, 11.4.0, and 11.4.1, and TIBCO Spotfire Server: versions 11.5.0 and 11.6.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/adv
E Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2021/12/tibco-security-advisory-december-14-2021-tibco-spotfire-server-2021-43051
CVE ID: CVE-2021-43052 State: PUBLISHED Published: 2022-01-11T18:25:24.808908Z Last Updated: 2024-09-17T00:10:54.268Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N) Vendors: TIBCO Software Inc. Products: TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition Problem Types: Successful execution of this vulnerability can result in an attacker gaining full access to communication on an existing eFTL channel on the affected system. Description: The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains an easily exploitable vulnerabi
nity Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains an easily exploitable vulnerability that allows authentication bypass due to a hard coded secret used in the default realm server of the affected system. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.7.2 and below, TIBCO FTL - Developer Edition: versions 6.7.2 and below, and TIBCO FTL - Enterprise Edition: versions 6.7.2 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/01/tibco-security-advisory-january-11-2022-tibco-ftl-2021-43052
CVE ID: CVE-2021-43053 State: PUBLISHED Published: 2022-01-11T18:25:26.263637Z Last Updated: 2024-09-16T18:08:27.215Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N) Vendors: TIBCO Software Inc. Products: TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition Problem Types: Successful execution of this vulnerability can result in an attacker gaining full access to communication on an existing eFTL channel on the affected system. Description: The Realm Server component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a difficult to exploit vulnerabilit
Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a difficult to exploit vulnerability that allows an unauthenticated attacker with network access to obtain the cluster secret of another application connected to the realm server. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.7.2 and below, TIBCO FTL - Developer Edition: versions 6.7.2 and below, and TIBCO FTL - Enterprise Edition: versions 6.7.2 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/01/tibco-security-advisory-january-11-2022-tibco-ftl
/support/advisories - https://www.tibco.com/support/advisories/2022/01/tibco-security-advisory-january-11-2022-tibco-ftl-2021-43053
CVE ID: CVE-2021-43054 State: PUBLISHED Published: 2022-01-11T18:25:27.550089Z Last Updated: 2024-09-17T02:11:55.506Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: TIBCO Software Inc. Products: TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, TIBCO eFTL - Enterprise Edition Problem Types: Successful execution of this vulnerability can result in an attacker gaining full access to communication on an existing channel on the affected system. Description: The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability
dition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows a low privileged attacker with network access to generate API tokens that can access any other channel with arbitrary permissions. Affected releases are TIBCO Software Inc.'s TIBCO eFTL - Community Edition: versions 6.7.2 and below, TIBCO eFTL - Developer Edition: versions 6.7.2 and below, and TIBCO eFTL - Enterprise Edition: versions 6.7.2 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/01/tibco-security-advisory-january-11-2022-tibco-e
es/support/advisories - https://www.tibco.com/support/advisories/2022/01/tibco-security-advisory-january-11-2022-tibco-eftl-2021-43054
CVE ID: CVE-2021-43055 State: PUBLISHED Published: 2022-01-11T18:25:28.892632Z Last Updated: 2024-09-16T20:03:47.637Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: TIBCO Software Inc. Products: TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, TIBCO eFTL - Enterprise Edition Problem Types: Successful execution of this vulnerability can result in an attacker gaining full access to communication on an existing channel on the affected system. Description: The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerabili
Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows clients to inherit the permissions of the client that initially connected on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO eFTL - Community Edition: versions 6.7.2 and below, TIBCO eFTL - Developer Edition: versions 6.7.2 and below, and TIBCO eFTL - Enterprise Edition: versions 6.7.2 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/01/tibco-security-advisory-january-11-2022-tibco-eftl-2021-43055
CVE ID: CVE-2021-43056 State: PUBLISHED Published: 2021-10-28T03:13:44 Last Updated: 2024-08-04T03:47:13.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel for powerpc before 5.14.15. It allows a malicious KVM guest to crash the host, when the host is running on Power8, due to an arch/powerpc/kvm/book3s_hv_rmhandlers.S implementation bug in the handling of the SRR1 register values. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/linus/cdeb5d7d890e14f3b70e8087e745c4a6a7d9f337 - https://lore.kernel.org/linuxppc-dev/87pmrtbbdt.fsf%40mpe.ellerman.id.au/T/#u - https://cdn.kernel.org/pub/linux/kernel/v
ttps://lore.kernel.org/linuxppc-dev/87pmrtbbdt.fsf%40mpe.ellerman.id.au/T/#u - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15 - http://www.openwall.com/lists/oss-security/2021/10/28/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBM4FP3IT3JZ2O7EBS7TEOG657N4ZGRE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RRAIS3PG4EV5WFLYESR6FXWM4BJJGWVA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AA7EAPPKWG4LMTQQLNNSKATY6ST2KQFE/
CVE ID: CVE-2021-43057 State: PUBLISHED Published: 2021-10-28T03:36:24 Last Updated: 2024-08-04T03:47:13.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.14.8. A use-after-free in selinux_ptrace_traceme (aka the SELinux handler for PTRACE_TRACEME) could be used by local attackers to cause memory corruption and escalate privileges, aka CID-a3727a8bac0a. This occurs because of an attempt to access the subjective credentials of another task. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/project-zero/issues/detail?id=2229 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/li
s://bugs.chromium.org/p/project-zero/issues/detail?id=2229 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a3727a8bac0a9e77c70820655fd8715523ba3db7 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.8 - https://security.netapp.com/advisory/ntap-20211125-0001/
CVE ID: CVE-2021-43058 State: PUBLISHED Published: 2021-11-01T21:03:18 Last Updated: 2024-08-04T03:47:13.253Z Vendors: n/a Products: REPLICATED CLASSIC Problem Types: URL redirection to untrusted site (“Open Redirect”). Description: An open redirect vulnerability exists in Replicated Classic versions prior to 2.53.1 that could lead to spoofing. To exploit this vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, redirecting the user to an untrusted site. Additional Analyst Notes: - CVE Program Container: References: - https://www.replicated.com/security/advisories/CVE-2021-43058
CVE ID: CVE-2021-43062 State: PUBLISHED Published: 2022-02-02T11:08:07 Last Updated: 2024-10-22T21:01:19.534Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:X/RC:C) Vendors: Fortinet Products: Fortinet FortiMail Problem Types: Execute unauthorized code or commands Description: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.0.1 and 7.0.0, version 6.4.5 and below, version 6.3.7 and below, version 6.0.11 and below allows attacker to execute unauthorized code or commands via crafted HTTP GET requests to the FortiGuard URI protection service. Additional Analyst Notes: - CVE Program Container: -
crafted HTTP GET requests to the FortiGuard URI protection service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-185 - http://packetstormsecurity.com/files/166055/Fortinet-Fortimail-7.0.1-Cross-Site-Scripting.html
CVE ID: CVE-2021-43063 State: PUBLISHED Published: 2021-12-08T13:16:29 Last Updated: 2024-10-25T13:39:33.081Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:X/RC:C) Vendors: Fortinet Products: Fortinet FortiWeb Problem Types: Execute unauthorized code or commands Description: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute unauthorized code or commands via crafted HTTP GET requests to the login webpage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://f
o the login webpage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-122
CVE ID: CVE-2021-43064 State: PUBLISHED Published: 2021-12-08T12:33:18 Last Updated: 2024-10-25T13:40:38.183Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C) Vendors: Fortinet Products: Fortinet FortiWeb Problem Types: Improper access control Description: A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to use the device as a proxy and reach external or protected hosts via redirection handlers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-168
CVE ID: CVE-2021-43065 State: PUBLISHED Published: 2021-12-09T09:15:04 Last Updated: 2024-10-25T13:37:33.111Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C) Vendors: Fortinet Products: Fortinet FortiNAC Problem Types: Escalation of privilege Description: A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below allows attacker to gain higher privileges via the access to sensitive system data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-178 - https://github.com/orangecertcc/security-resea
ulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-178 - https://github.com/orangecertcc/security-research/security/advisories/GHSA-8wx4-g5p9-348h
CVE ID: CVE-2021-43066 State: PUBLISHED Published: 2022-05-11T15:40:10 Last Updated: 2024-10-22T20:56:54.929Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H/E:H/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiClientWindows Problem Types: Escalation of privilege Description: A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below, version 6.2.9 and below, version 6.0.10 and below allows attacker to escalate privilege via the MSI installer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-154
CVE ID: CVE-2021-43067 State: PUBLISHED Published: 2021-12-08T11:22:39 Last Updated: 2024-10-25T13:42:16.266Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L/E:P/RL:X/RC:X) Vendors: Fortinet Products: Fortinet FortiAuthenticator Problem Types: Improper access control Description: A exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator version 6.4.0, version 6.3.2 and below, version 6.2.1 and below, version 6.1.2 and below, version 6.0.7 to 6.0.1 allows attacker to duplicate a target LDAP user 2 factors authentication token via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
token via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-211
CVE ID: CVE-2021-43068 State: PUBLISHED Published: 2021-12-09T09:38:37 Last Updated: 2024-10-25T13:36:50.227Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:X/RC:X) Vendors: Fortinet Products: Fortinet FortiAuthenticator Problem Types: Improper access control Description: A improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the second factor of authentication via a RADIUS login portal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-212
CVE ID: CVE-2021-43069 State: REJECTED Published: N/A Last Updated: 2025-05-06T02:55:09.627Z Description: No description available.
CVE ID: CVE-2021-43070 State: PUBLISHED Published: 2022-03-02T16:35:22 Last Updated: 2024-10-22T20:59:56.941Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:F/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiWLM Problem Types: Information disclosure Description: Multiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2 and below, 8.5.2 and below, 8.4.2 and below, 8.3.3 and below, 8.2.2 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.c
requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-21-106
CVE ID: CVE-2021-43071 State: PUBLISHED Published: 2021-12-09T09:18:03 Last Updated: 2024-10-25T13:37:23.254Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C) Vendors: Fortinet Products: Fortinet FortiWeb Problem Types: Execute unauthorized code or commands Description: A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the LogReport API controller. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-188
CVE ID: CVE-2021-43072 State: PUBLISHED Published: 2023-07-18T00:01:04.306Z Last Updated: 2024-09-17T14:05:39.988Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C) Vendors: Fortinet Products: FortiAnalyzer, FortiManager Problem Types: CWE-120 Description: A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiAnalyzer version 7.0.2 and below, version 6.4.7 and below, version 6.2.9 and below, version 6.0.11 and below, version 5.6.11 and below, FortiManager version 7.0.2 and below, version 6.4.7 and below, version 6.2.9 and below, version 6.0.11 and below, version 5.6.11 and below, FortiOS version 7.0.0 through 7.0.4, 6.4
w, version 6.2.9 and below, version 6.0.11 and below, version 5.6.11 and below, FortiOS version 7.0.0 through 7.0.4, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.x and FortiProxy version 7.0.0 through 7.0.3, 2.0.0 through 2.0.8, 1.2.x, 1.1.x and 1.0.x allows attacker to execute unauthorized code or commands via crafted CLI `execute restore image` and `execute certificate remote` operations with the tFTP protocol. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fortiguard.com/advisory/FG-IR-21-206
CVE ID: CVE-2021-43073 State: PUBLISHED Published: 2022-02-02T11:01:34 Last Updated: 2024-10-25T13:35:55.807Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C) Vendors: n/a Products: n/a Problem Types: n/a Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-180
CVE ID: CVE-2021-43074 State: PUBLISHED Published: 2023-02-16T18:05:27.932Z Last Updated: 2024-10-22T20:50:25.414Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:U/RC:C) Vendors: Fortinet Products: FortiSwitch, FortiWeb, FortiProxy, FortiOS Problem Types: CWE-347 Description: An improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all versions, 6.3.16 and below, 6.2 all versions, 6.1 all versions, 6.0 all versions; FortiOS 7.0.3 and below, 6.4.8 and below, 6.2 all versions, 6.0 all versions; FortiSwitch 7.0.3 and below, 6.4.10 and below, 6.2 all versions, 6.0 all versions; FortiProxy 7.0.1 and below, 2.0.7 and below, 1.2 all
.3 and below, 6.4.10 and below, 6.2 all versions, 6.0 all versions; FortiProxy 7.0.1 and below, 2.0.7 and below, 1.2 all versions, 1.1 all versions, 1.0 all versions may allow an attacker to decrypt portions of the administrative session management cookie if able to intercept the latter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-21-126
CVE ID: CVE-2021-43075 State: PUBLISHED Published: 2022-03-01T18:25:11 Last Updated: 2024-10-25T13:34:55.904Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C) Vendors: Fortinet Products: Fortinet FortiWLM Problem Types: Execute unauthorized code or commands Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.2 and below, version 8.5.2 and below, version 8.4.2 and below, version 8.3.2 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the alarm dashboard and controller config handlers. Additional Analyst Notes: - CVE Program Co
crafted HTTP requests to the alarm dashboard and controller config handlers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-128
CVE ID: CVE-2021-43076 State: PUBLISHED Published: 2022-09-06T15:15:17 Last Updated: 2024-10-22T20:54:10.110Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:F/RL:X/RC:X) Vendors: Fortinet Products: FortiADC Problem Types: Improper access control Description: An improper privilege management vulnerability [CWE-269] in FortiADC versions 6.2.1 and below, 6.1.5 and below, 6.0.4 and below, 5.4.5 and below and 5.3.7 and below may allow a remote authenticated attacker with restricted user profile to modify the system files using the shell access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-21
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-21-215