A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, FortiManager version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http requests.
References
| Link | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-24-091 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
31 Jan 2025, 16:49
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://fortiguard.fortinet.com/psirt/FG-IR-24-091 - Vendor Advisory | |
| CPE | cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| First Time |
Fortinet fortimanager Cloud
Fortinet fortimanager Fortinet fortianalyzer Fortinet Fortinet fortianalyzer Cloud |
14 Jan 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-14 14:15
Updated : 2025-01-31 16:49
NVD link : CVE-2024-35275
Mitre link : CVE-2024-35275
JSON object : View
Products Affected
fortinet
- fortimanager_cloud
- fortianalyzer
- fortianalyzer_cloud
- fortimanager
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')