PT-2017-6679 · Fortinet · Fortimanager

Published 2017-08-11 · Updated 2017-08-26 · CVE-2015-3615

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Fortinet FortiManager versions 5.0.x through 5.0.10 Fortinet FortiManager versions 5.2.x through 5.2.1

Description A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via vectors involving unspecified parameters and a privilege escalation attack.

Recommendations For Fortinet FortiManager versions 5.0.x through 5.0.10, update to version 5.0.11 or later. For Fortinet FortiManager versions 5.2.x through 5.2.1, update to version 5.2.2 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2015-3615

Affected Products

Fortimanager

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-3615 · Security Note
• https://fortiguard.com/psirt/FG-IR-15-011 · Vendor Advisory
• http://securitytracker.com/id/1032188 · Note
• http://securityfocus.com/bid/74444 · Note