Fortinet FortiADC up to 6.2.2/7.0.1 Management Interface sql injection

A vulnerability, which was classified as critical, has been found in Fortinet FortiADC up to 6.2.2/7.0.1. Affected by this issue is an unknown function of the component Management Interface. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Field07/19/2022 11:31 AM08/06/2022 02:09 PM
vendorFortinetFortinet
nameFortiADCFortiADC
version<=6.2.2/7.0.1<=6.2.2/7.0.1
componentManagement InterfaceManagement Interface
cwe89 (sql injection)89 (sql injection)
risk22
cvss3_vuldb_avNN
cvss3_vuldb_acLL
cvss3_vuldb_prLL
cvss3_vuldb_uiNN
cvss3_vuldb_sUU
cvss3_vuldb_cLL
cvss3_vuldb_iLL
cvss3_vuldb_aLL
cvss3_vuldb_rcCC
cvss3_cna_avNN
cvss3_cna_acLL
cvss3_cna_prLL
cvss3_cna_uiNN
cvss3_cna_sUU
cvss3_cna_cLL
cvss3_cna_iLL
cvss3_cna_aNN
urlhttps://fortiguard.com/psirt/FG-IR-22-051https://fortiguard.com/psirt/FG-IR-22-051
cveCVE-2022-26120CVE-2022-26120
cve_assigned1645743600 (02/25/2022)1645743600 (02/25/2022)
cve_cnaFortinet, Inc.Fortinet, Inc.
cve_nvd_summaryMultiple improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerabilities [CWE-89] in FortiADC management interface 7.0.0 through 7.0.1, 5.0.0 through 6.2.2 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.Multiple improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerabilities [CWE-89] in FortiADC management interface 7.0.0 through 7.0.1, 5.0.0 through 6.2.2 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
date1658181600 (07/19/2022)1658181600 (07/19/2022)
cvss2_vuldb_avNN
cvss2_vuldb_acLL
cvss2_vuldb_ciPP
cvss2_vuldb_iiPP
cvss2_vuldb_aiPP
cvss2_vuldb_rcCC
cvss2_vuldb_auSS
cvss2_vuldb_eNDND
cvss2_vuldb_rlNDND
cvss3_vuldb_eXX
cvss3_vuldb_rlXX
cvss3_cna_basescore5.45.4
cvss2_vuldb_basescore6.56.5
cvss2_vuldb_tempscore6.56.5
cvss3_vuldb_basescore6.36.3
cvss3_vuldb_tempscore6.36.3
cvss3_meta_basescore5.96.8
cvss3_meta_tempscore5.96.8
price_0day$0-$5k$0-$5k
cvss3_nvd_avN
cvss3_nvd_acL
cvss3_nvd_prL
cvss3_nvd_uiN
cvss3_nvd_sU
cvss3_nvd_cH
cvss3_nvd_iH
cvss3_nvd_aH
cvss3_nvd_basescore8.8

Might our Artificial Intelligence support you?

Check our Alexa App!