Description
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2 through 7.6.4 may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests. Successful exploitation would require a large amount of effort in preparation because of ASLR and network segmentation
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Fortinet FortiAnalyzer Cloud
Default version status: unaffected
7.6.2 to ≤ 7.6.4affected
Fortinet FortiManager Cloud
Default version status: unaffected
7.6.2 to ≤ 7.6.4affected