An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature. An attacker may be able to social engineer an authenticated user into generating a PDF file containing injected malicious URLs.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/104546 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1041184 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1041185 | Third Party Advisory VDB Entry |
| https://fortiguard.com/advisory/FG-IR-18-022 | Vendor Advisory |
| http://www.securityfocus.com/bid/104546 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1041184 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1041185 | Third Party Advisory VDB Entry |
| https://fortiguard.com/advisory/FG-IR-18-022 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/104546 - Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1041184 - Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1041185 - Third Party Advisory, VDB Entry | |
| References | () https://fortiguard.com/advisory/FG-IR-18-022 - Vendor Advisory |
Information
Published : 2018-06-27 20:29
Updated : 2024-11-21 03:59
NVD link : CVE-2018-1355
Mitre link : CVE-2018-1355
CVE.ORG link : CVE-2018-1355
JSON object : View
Products Affected
fortinet
- fortimanager
- fortianalyzer
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')