PT-2022-19394 · Fortinet · Fortiedr

Published 2022-07-18 · Updated 2022-07-27 · CVE-2022-29057

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Fortinet FortiEDR versions 4.0.0, 5.0.0 through 5.0.3 Patch 6, 5.1.0

Description The issue is related to improper neutralization of input during web page generation, also known as cross-site scripting. This allows a remote authenticated attacker to perform a reflected cross-site scripting attack by injecting malicious payload into the Management Console via various endpoints.

Recommendations For Fortinet FortiEDR version 4.0.0, update to a version that includes the fix for this issue. For Fortinet FortiEDR versions 5.0.0 through 5.0.3 Patch 6, update to a version that includes the fix for this issue. For Fortinet FortiEDR version 5.1.0, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the Management Console to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-29057

Affected Products

Fortiedr

References · 5

• https://osv.dev/vulnerability/CVE-2022-29057 · Vendor Advisory
• https://fortiguard.com/psirt/FG-IR-22-077 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29057 · Security Note
• https://t.me/cibsecurity/46554 · Telegram Post
• https://t.me/cvenotify/33396 · Telegram Post