A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4.0 through 7.4.7, FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.2 through 7.0.16, FortiSwitchManager 7.2.1 through 7.2.5 allows attackers to escalate their privilege via specially crafted http requests.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
FortiPAM
Vendor
Fortinet
Product
FortiPAM
Platforms
Unknown
Default status
unaffected
FortiPAM · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.5.0
affected
Unavailable
Unavailable
Unavailable
None listed
1.4.0
affected
semver
Unavailable
1.4.2
None listed
1.3.0
affected
semver
Unavailable
1.3.1
None listed
1.2.0
affected
Unavailable
Unavailable
Unavailable
None listed
1.1.0
affected
semver
Unavailable
1.1.2
None listed
1.0.0
affected
semver
Unavailable
1.0.3
None listed
FortiOS
Vendor
Fortinet
Product
FortiOS
Platforms
Unknown
Default status
unaffected
FortiOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.6.0
affected
semver
Unavailable
7.6.2
None listed
7.4.0
affected
semver
Unavailable
7.4.6
None listed
7.2.0
affected
semver
Unavailable
7.2.10
None listed
7.0.2
affected
semver
Unavailable
7.0.16
None listed
FortiSRA
Vendor
Fortinet
Product
FortiSRA
Platforms
Unknown
Default status
unaffected
FortiSRA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.5.0
affected
Unavailable
Unavailable
Unavailable
None listed
1.4.0
affected
semver
Unavailable
1.4.2
None listed
FortiProxy
Vendor
Fortinet
Product
FortiProxy
Platforms
Unknown
Default status
unaffected
FortiProxy · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.6.0
affected
semver
Unavailable
7.6.1
None listed
7.4.0
affected
semver
Unavailable
7.4.7
None listed
FortiSwitchManager
Vendor
Fortinet
Product
FortiSwitchManager
Platforms
Unknown
Default status
unaffected
FortiSwitchManager · Scoped product and version facts