Description
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9, FortiAnalyzer 7.0.0 through 7.0.13, FortiAnalyzer 6.4 all versions, FortiAnalyzer 6.2 all versions, FortiAnalyzer 6.0 all versions, FortiAnalyzer Cloud 7.4.1 through 7.4.5, FortiAnalyzer Cloud 7.2.1 through 7.2.9, FortiAnalyzer Cloud 7.0.1 through 7.0.13, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.9, FortiManager 7.0.0 through 7.0.13, FortiManager 6.4 all versions, FortiManager 6.2 all versions, FortiManager 6.0 all versions, FortiManager Cloud 7.6.2, FortiManager Cloud 7.4.1 through 7.4.5, FortiManager Cloud 7.2.1 through 7.2.9, FortiManager Cloud 7.0.1 through 7.0.13, FortiManager Cloud 6.4 all versions, FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4.0 through 6.4.15, FortiOS 6.2 all versions, FortiProxy 7.6.0 through 7.6.1, FortiProxy 7.4.0 through 7.4.7, FortiProxy 7.2.0 through 7.2.12, FortiProxy 7.0.0 through 7.0.19, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specifically crafted requests.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Fortinet FortiManager
Default version status: unaffected
7.6.0 to ≤ 7.6.1affected7.4.0 to ≤ 7.4.5affected7.2.0 to ≤ 7.2.9affected7.0.0 to ≤ 7.0.13affected6.4.0 to ≤ 6.4.15affected6.2.0 to ≤ 6.2.13affected6.0.0 to ≤ 6.0.12affected
Fortinet FortiOS
Default version status: unaffected
7.6.0 to ≤ 7.6.2affected7.4.0 to ≤ 7.4.6affected7.2.0 to ≤ 7.2.10affected7.0.0 to ≤ 7.0.16affected6.4.0 to ≤ 6.4.15affected6.2.0 to ≤ 6.2.17affected
Fortinet FortiProxy
Default version status: unaffected
7.6.0 to ≤ 7.6.1affected7.4.0 to ≤ 7.4.7affected7.2.0 to ≤ 7.2.12affected7.0.0 to ≤ 7.0.19affected2.0.0 to ≤ 2.0.14affected1.2.1 to ≤ 1.2.13affected01.02.00affected1.1.4 to ≤ 1.1.6affected01.01.00 to ≤ 01.01.03affected01.00.00 to ≤ 01.00.07affected
Fortinet FortiManager Cloud
Default version status: unaffected
7.6.2affected7.4.1 to ≤ 7.4.5affected7.2.1 to ≤ 7.2.9affected7.0.1 to ≤ 7.0.13affected6.4.1 to ≤ 6.4.7affected
Fortinet FortiAnalyzer
Default version status: unaffected
7.6.0 to ≤ 7.6.2affected7.4.0 to ≤ 7.4.5affected7.2.0 to ≤ 7.2.9affected7.0.0 to ≤ 7.0.13affected6.4.0 to ≤ 6.4.15affected6.2.0 to ≤ 6.2.13affected6.0.0 to ≤ 6.0.12affected
Fortinet FortiAnalyzer Cloud
Default version status: unaffected
7.4.1 to ≤ 7.4.5affected7.2.1 to ≤ 7.2.9affected7.0.1 to ≤ 7.0.13affected6.4.1 to ≤ 6.4.7affected