PT-2018-6529
CVE-2017-17541
·
تاريخ النشر
2018-07-16
·
تاريخ التحديث
2018-09-12
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
FortiManager versions 5.6.4 and below
FortiAnalyzer versions 5.6.4 and below
Description:
A Cross-site Scripting (XSS) issue allows the injection of Javascript code and HTML tags through the CN value of CA and CRL certificates via the import CA and CRL certificates feature.
Recommendations:
For FortiManager versions 5.6.4 and below, update to a version above 5.6.4 to resolve the issue.
For FortiAnalyzer versions 5.6.4 and below, update to a version above 5.6.4 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾