PT-2019-6084 · Fortinet · Fortianalyzer+1

Publicado 2019-05-28 · Atualizado 2019-05-30 · CVE-2018-13375

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions FortiManager versions 5.6.0 and below FortiAnalyzer versions 5.6.0 and below

Description The issue is related to the failure to protect the web page structure, allowing an attacker to redirect users to a malicious web page. An improper neutralization of script-related HTML tags in FortiAnalyzer and FortiManager enables an attacker to send a DHCP request containing malicious scripts in the HOSTNAME parameter. The malicious script code is executed when viewing logs in FortiAnalyzer and FortiManager (with the FortiAnalyzer feature enabled).

Recommendations For FortiManager versions 5.6.0 and below, consider disabling the FortiAnalyzer feature until a patch is available. For FortiAnalyzer versions 5.6.0 and below, restrict access to the log viewing functionality to minimize the risk of exploitation. Avoid using the HOSTNAME parameter in DHCP requests until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2021-05084

CVE-2018-13375

Produtos afetados

Fortianalyzer

Fortimanager

Referências · 4

• https://fortiguard.com/advisory/FG-IR-18-121 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-13375 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2021-05084 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-13375 · Nota de Segurança