Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-1355

Опубликовано: 27 июн. 2018
Источник: nvd
CVSS3: 6.1
CVSS2: 5.8
EPSS Низкий

Описание

An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature. An attacker may be able to social engineer an authenticated user into generating a PDF file containing injected malicious URLs.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*
Версия до 5.6.5 (включая)
cpe:2.3:a:fortinet:fortianalyzer:6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*
Версия до 5.6.5 (включая)
cpe:2.3:a:fortinet:fortimanager:6.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 45%
0.00227
Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 6.1
github
больше 3 лет назад

An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature. An attacker may be able to social engineer an authenticated user into generating a PDF file containing injected malicious URLs.

EPSS

Процентиль: 45%
0.00227
Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601