PT-2021-2419 · Fortinet · Fortiweb

Andrey Medov · Published 2021-01-04 · Updated 2021-01-20 · CVE-2020-29016

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: FortiWeb versions 6.3.0 through 6.3.5 FortiWeb versions prior to 6.2.4

Description: A stack-based buffer overflow issue may allow an unauthenticated, remote attacker to overwrite the content of the stack and potentially execute arbitrary code by sending a crafted request with a large certname. This could enable the attacker to execute arbitrary code.

Recommendations: For FortiWeb versions 6.3.0 through 6.3.5, update to a version outside of this range to resolve the issue. For FortiWeb versions prior to 6.2.4, update to version 6.2.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable function related to the certname parameter until a patch is available.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2021-01671

CVE-2020-29016

Affected Products

Fortiweb

References · 7

• https://fortiguard.com/psirt/FG-IR-20-125 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01671 · Security Note
• https://osv.dev/vulnerability/CVE-2020-29016 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-29016 · Security Note
• https://t.me/cvenotify/8536 · Telegram Post
• https://t.me/cibsecurity/22170 · Telegram Post
• https://securitylab.ru/news/515284.php · Note