PT-2021-5687 · Fortinet · Fortimanager+1

Published 2021-08-03 · Updated 2021-08-13 · CVE-2021-32597

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions FortiManager versions 7.0.0, 6.4.5 and below, 6.2.7 and below FortiAnalyzer versions 7.0.0, 6.4.5 and below, 6.2.7 and below

Description The issue is related to improper neutralization of input during web page generation, which may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack by injecting malicious payload in GET parameters. This could potentially lead to security breaches.

Recommendations For FortiManager versions 7.0.0, 6.4.5 and below, 6.2.7 and below, consider disabling the user interface as a temporary workaround until a patch is available. For FortiAnalyzer versions 7.0.0, 6.4.5 and below, 6.2.7 and below, restrict access to the user interface to minimize the risk of exploitation. Avoid using malicious GET parameters in the affected user interface until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2022-00126

CVE-2021-32597

Affected Products

Fortianalyzer

Fortimanager

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-32597 · Security Note
• https://osv.dev/vulnerability/CVE-2021-32597 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00126 · Security Note
• https://fortiguard.com/advisory/FG-IR-21-054 · Vendor Advisory
• https://t.me/cibsecurity/26920 · Telegram Post
• https://fortiguard.com/psirt/FG-IR-21-054 · Note