A vulnerability was found in Fortinet FortiManager up to 5.0.10/5.2.1 and classified as problematic. Affected by this issue is an unknown functionality of the component CLI. The manipulation with an unknown input leads to a access control vulnerability. Using CWE to declare the problem leads to CWE-264. Impacted is confidentiality, integrity, and availability. CVE summarizes:

Fortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI commands.

The bug was discovered 04/16/2015. The weakness was presented 08/22/2017 by Security Team (Website). The advisory is available at securitytracker.com. This vulnerability is handled as CVE-2015-3617 since 04/30/2015. Local access is required to approach this attack. The successful exploitation needs a simple authentication. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1068 by the MITRE ATT&CK project.

The vulnerability was handled as a non-public zero-day exploit for at least 859 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version 5.0.11 or 5.2.2 eliminates this vulnerability.

See 105229, 105230 and 105231 for similar entries.

Productinfo

Vendor

• Fortinet

Name

• FortiManager

Version

• 5.0.0
• 5.0.1
• 5.0.2
• 5.0.3
• 5.0.4
• 5.0.5
• 5.0.6
• 5.0.7
• 5.0.8
• 5.0.9
• 5.0.10
• 5.2.0
• 5.2.1

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion