PT-2023-7697 · Fortinet · Fortiproxy+2

Published

2023-12-08

·

Updated

2023-12-15

·

CVE-2023-36639

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions FortiProxy versions 7.2.0 through 7.2.4 FortiProxy versions 7.0.0 through 7.0.10 FortiOS versions 7.4.0 FortiOS versions 7.2.0 through 7.2.4 FortiOS versions 7.0.0 through 7.0.11 FortiOS versions 6.4.0 through 6.4.12 FortiOS versions 6.2.0 through 6.2.15 FortiOS versions 6.0.0 through 6.0.17 FortiPAM versions 1.0.0 through 1.0.3
Description The issue is related to a use of externally-controlled format string in the HTTPSd daemon of FortiOS, FortiProxy, and FortiPAM, which may allow an attacker to execute unauthorized code or commands via specially crafted API requests. This can be exploited by sending specially crafted requests to execute arbitrary code or commands.
Recommendations For FortiProxy versions 7.2.0 through 7.2.4, update to a version outside of this range to mitigate the risk. For FortiProxy versions 7.0.0 through 7.0.10, update to a version outside of this range to mitigate the risk. For FortiOS versions 7.4.0, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, update to a version outside of these ranges to mitigate the risk. For FortiPAM versions 1.0.0 through 1.0.3, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider restricting access to the HTTPSd daemon to minimize the risk of exploitation.

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

BDU:2023-08764
CVE-2023-36639

Affected Products

Fortios
Fortipam
Fortiproxy