PT-2021-3978 · Fortinet · Fortiportal

Published 2021-08-03 · Updated 2021-08-11 · CVE-2021-32590

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiPortal versions 4.2.2 and earlier FortiPortal versions 5.2.0 through 5.2.5 FortiPortal versions 5.3.0 through 5.3.5 FortiPortal versions 6.0.0 through 6.0.4

Description The issue is related to multiple improper neutralization of special elements used in an SQL command, which may allow an attacker with regular user's privileges to execute arbitrary commands on the underlying SQL database via specifically crafted HTTP requests. This can be achieved by exploiting a lack of validation of XML object sequences. The vulnerability can be exploited remotely.

Recommendations For FortiPortal versions 4.2.2 and earlier, update to a version later than 4.2.2. For FortiPortal versions 5.2.0 through 5.2.5, update to a version later than 5.2.5. For FortiPortal versions 5.3.0 through 5.3.5, update to a version later than 5.3.5. For FortiPortal versions 6.0.0 through 6.0.4, update to a version later than 6.0.4. As a temporary workaround, consider restricting access to the SQL database to minimize the risk of exploitation. Avoid using specifically crafted HTTP requests that may trigger the vulnerability.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2021-04497

CVE-2021-32590

Affected Products

Fortiportal

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2021-32590 · Security Note
• https://bdu.fstec.ru/vul/2021-04497 · Security Note
• https://osv.dev/vulnerability/CVE-2021-32590 · Vendor Advisory
• https://fortiguard.com/advisory/FG-IR-21-084 · Vendor Advisory
• https://t.me/cibsecurity/26806 · Telegram Post
• https://t.me/cvenotify/18632 · Telegram Post
• https://fortiguard.com/psirt/FG-IR-21-084 · Note