CVE-2021-36180

Name of the Vulnerable Software and Affected Versions FortiWeb versions 6.4.1 and below FortiWeb versions 6.3.15 and below FortiWeb versions 6.2.5 and below

Description The issue is related to multiple improper neutralization of special elements used in a command, which may allow an authenticated attacker to execute unauthorized code or commands via crafted parameters of HTTP requests.

Recommendations For FortiWeb versions 6.4.1 and below, update to a version above 6.4.1 to resolve the issue. For FortiWeb versions 6.3.15 and below, update to a version above 6.3.15 to resolve the issue. For FortiWeb versions 6.2.5 and below, update to a version above 6.2.5 to resolve the issue. As a temporary workaround, consider restricting access to the FortiWeb management interface to minimize the risk of exploitation.