Fortinet Products Multiple Vulnerabilities

Release Date: 15 Nov 2024 3136 Views

RISK: Medium Risk

TYPE: Operating Systems - Networks OS

Multiple vulnerabilities were identified in Fortinet Products. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, sensitive information disclosure, security restriction bypass, data manipulation, and elevation of privilege on the targeted system.

Impact

Remote Code Execution
Information Disclosure
Security Restriction Bypass
Data Manipulation
Elevation of Privilege

System / Technologies affected

FortiAnalyzer

FortiAnalyzer 6.2 all versions
FortiAnalyzer 6.4 all versions
FortiAnalyzer 7.0 all versions
FortiAnalyzer 7.2 version 7.2.0 through 7.2.5
FortiAnalyzer 7.4 version 7.4.0 through 7.4.2

FortiAnalyzer-BigData

FortiAnalyzer-BigData 6.2 all versions
FortiAnalyzer-BigData 6.4 all versions
FortiAnalyzer-BigData 7.0 all versions
FortiAnalyzer-BigData 7.2 version 7.2.0 through 7.2.7
FortiAnalyzer-BigData 7.4 version 7.4.0

FortiManager

FortiManager 6.2 all versions
FortiManager 6.4 all versions
FortiManager 7.0 all versions
FortiManager 7.2 version 7.2.0 through 7.2.5
FortiManager 7.4 version 7.4.0 through 7.4.2

FortiOS

FortiOS 6.0 all versions
FortiOS 6.2 all versions
FortiOS 6.4 all versions
FortiOS 7.0 all versions
FortiOS 7.2 version 7.2.0 through 7.2.8
FortiOS 7.4 version 7.4.0 through 7.4.3

FortiProxy

FortiProxy 1.0 all versions
FortiProxy 1.1 all versions
FortiProxy 1.2 all versions
FortiProxy 2.0 all versions
FortiProxy 7.0 version 7.0.0 through 7.0.16
FortiProxy 7.2 version 7.2.0 through 7.2.9
FortiProxy 7.4 version 7.4.0 through 7.4.3

FortiClientWindows

FortiClientWindows 6.4 all versions
FortiClientWindows 7.0 version 7.0.0 through 7.0.12
FortiClientWindows 7.2 version 7.2.0 through 7.2.4
FortiClientWindows 7.4 version 7.4.0

FortiClientMac

FortiClientMac 6.4 all versions
FortiClientMac 7.0 version 7.0.0 through 7.0.10
FortiClientMac 7.2 version 7.2.0 through 7.2.4
FortiClientMac 7.4 version 7.4.0

FortiWeb

FortiWeb 6.3 all versions
FortiWeb 7.0 all versions
FortiWeb 7.2 all versions
FortiWeb 7.4 version 7.4.0 through 7.4.3
FortiWeb 7.6 version 7.6.0

FortiSwitchManager

FortiSwitchManager 7.0 version 7.0.0 through 7.0.3
FortiSwitchManager 7.2 version 7.2.0 through 7.2.3

FortiPAM

FortiPAM 1.0 all versions
FortiPAM 1.1 all versions
FortiPAM 1.2 all versions

FortiPortal

FortiPortal 5.3 all versions
FortiPortal 6.0 version 6.0.0 through 6.0.14

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

Vulnerability Identifier

Source

Fortinet