PT-2018-6529 · Fortinet · Fortianalyzer+1

Publicado 2018-07-16 · Atualizado 2018-09-12 · CVE-2017-17541

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: FortiManager versions 5.6.4 and below FortiAnalyzer versions 5.6.4 and below

Description: A Cross-site Scripting (XSS) issue allows the injection of Javascript code and HTML tags through the CN value of CA and CRL certificates via the import CA and CRL certificates feature.

Recommendations: For FortiManager versions 5.6.4 and below, update to a version above 5.6.4 to resolve the issue. For FortiAnalyzer versions 5.6.4 and below, update to a version above 5.6.4 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-17541

Produtos afetados

Fortianalyzer

Fortimanager

Referências · 5

• http://securitytracker.com/id/1041247 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-17541 · Nota de Segurança
• https://fortiguard.com/advisory/FG-IR-17-305 · Aviso do Fabricante
• http://securitytracker.com/id/1041246 · Nota
• https://osv.dev/vulnerability/CVE-2017-17541 · Aviso do Fabricante