PT-2023-6003
CVE-2023-36555
·
تاريخ النشر
2023-10-10
·
تاريخ التحديث
2023-10-13
الوصف من
CVSS 2.0
5.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Fortinet FortiOS versions 7.2.0 through 7.2.4
Description
The issue is related to an improper neutralization of script-related HTML tags in a web page, which can allow an attacker to execute unauthorized code or commands. This can be achieved via the SAML and Security Fabric components. A remote attacker may exploit this to inject script-related HTML tags.
Recommendations
For Fortinet FortiOS versions 7.2.0 through 7.2.4, consider disabling the SAML and Security Fabric components until a patch is available to prevent exploitation. Restrict access to these components to minimize the risk of unauthorized code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾