PT-2018-6529

CVE-2017-17541

·

Publicado

2018-07-16

·

Atualizado

2018-09-12

Descrição por

CVSS 3.1
6.1
Média
MétricasAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: FortiManager versions 5.6.4 and below FortiAnalyzer versions 5.6.4 and below
Description: A Cross-site Scripting (XSS) issue allows the injection of Javascript code and HTML tags through the CN value of CA and CRL certificates via the import CA and CRL certificates feature.
Recommendations: For FortiManager versions 5.6.4 and below, update to a version above 5.6.4 to resolve the issue. For FortiAnalyzer versions 5.6.4 and below, update to a version above 5.6.4 to resolve the issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Identificadores relacionados
CVE-2017-17541
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com