PT-2021-3437 · Fortinet · Fortiweb

Andrey Medov · Published 2021-05-28 · Updated 2021-08-18 · CVE-2021-22123

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FortiWeb versions 6.3.7 and below FortiWeb versions 6.2.3 and below FortiWeb versions 6.1.x FortiWeb versions 6.0.x FortiWeb versions 5.9.x

Description The issue is an OS command injection vulnerability in FortiWeb's management interface. This vulnerability may allow a remote authenticated attacker to execute arbitrary commands on the system via the SAML server configuration page. The vulnerability exists due to the lack of measures to neutralize special elements used in the OS command.

Recommendations For FortiWeb versions 6.3.7 and below, consider disabling the SAML server configuration page until a patch is available. For FortiWeb versions 6.2.3 and below, restrict access to the management interface to minimize the risk of exploitation. For FortiWeb versions 6.1.x, 6.0.x, and 5.9.x, avoid using the SAML server configuration page until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2021-03289

CVE-2021-22123

Affected Products

Fortiweb

References · 9

• 🔥 https://github.com/murataydemir/CVE-2021-22123 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-22123 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22123 · Vendor Advisory
• https://fortiguard.com/advisory/FG-IR-20-120 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03289 · Security Note
• https://t.me/thehackernews/1448 · Telegram Post
• https://t.me/ptswarm/43 · Telegram Post
• https://t.me/cybersecuritytechnologies/4093 · Telegram Post
• https://t.me/cvenotify/15359 · Telegram Post