cnvd - cnvd-2018-13889

cnvd-2018-13889

Vulnerability from cnvd

Title: Fortinet FortiAnalyzer/FortiManager开放重定向漏洞

Description:

Fortinet FortiManager和FortiAnalyzer都是美国飞塔（Fortinet）公司的产品。Fortinet FortiManager是一套集中式网络安全管理解决方案。FortiAnalyzer是一套集中式网络安全报告解决方案。

Fortinet FortiManager 6.0.0及之前版本和FortiAnalyzer 6.0.0及之前版本中存在开放重定向漏洞。攻击者可通过实施社会工程攻击利用该漏洞注入脚本代码。

Severity: 中

Patch Name: Fortinet FortiAnalyzer/FortiManager开放重定向漏洞的补丁

Patch Description:

Fortinet FortiManager 6.0.0及之前版本和FortiAnalyzer 6.0.0及之前版本中存在开放重定向漏洞。攻击者可通过实施社会工程攻击利用该漏洞注入脚本代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.fortinet.com/products/fortianalyzer/

Reference: http://www.securityfocus.com/bid/104546

Impacted products

Name
['Fortinet FortiAnalyzer <=6.0.0', 'Fortinet FortiManager <=6.0.0']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "104546"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-1355"
    }
  },
  "description": "Fortinet FortiManager\u548cFortiAnalyzer\u90fd\u662f\u7f8e\u56fd\u98de\u5854\uff08Fortinet\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Fortinet FortiManager\u662f\u4e00\u5957\u96c6\u4e2d\u5f0f\u7f51\u7edc\u5b89\u5168\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002FortiAnalyzer\u662f\u4e00\u5957\u96c6\u4e2d\u5f0f\u7f51\u7edc\u5b89\u5168\u62a5\u544a\u89e3\u51b3\u65b9\u6848\u3002\r\n\r\nFortinet FortiManager 6.0.0\u53ca\u4e4b\u524d\u7248\u672c\u548cFortiAnalyzer 6.0.0\u53ca\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5f00\u653e\u91cd\u5b9a\u5411\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5b9e\u65bd\u793e\u4f1a\u5de5\u7a0b\u653b\u51fb\u5229\u7528\u8be5\u6f0f\u6d1e\u6ce8\u5165\u811a\u672c\u4ee3\u7801\u3002",
  "discovererName": "Donato Onofri, Luca Napolitano and Francesca Perrone of Business Integration Partners S.p.A.",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u8fd9\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8bf7\u5230\u5382\u5546\u7684\u4e3b\u9875\u4e0b\u8f7d\uff1a\r\nhttp://www.fortinet.com/products/fortianalyzer/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-13889",
  "openTime": "2018-07-25",
  "patchDescription": "Fortinet FortiManager\u548cFortiAnalyzer\u90fd\u662f\u7f8e\u56fd\u98de\u5854\uff08Fortinet\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Fortinet FortiManager\u662f\u4e00\u5957\u96c6\u4e2d\u5f0f\u7f51\u7edc\u5b89\u5168\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002FortiAnalyzer\u662f\u4e00\u5957\u96c6\u4e2d\u5f0f\u7f51\u7edc\u5b89\u5168\u62a5\u544a\u89e3\u51b3\u65b9\u6848\u3002\r\n\r\nFortinet FortiManager 6.0.0\u53ca\u4e4b\u524d\u7248\u672c\u548cFortiAnalyzer 6.0.0\u53ca\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5f00\u653e\u91cd\u5b9a\u5411\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5b9e\u65bd\u793e\u4f1a\u5de5\u7a0b\u653b\u51fb\u5229\u7528\u8be5\u6f0f\u6d1e\u6ce8\u5165\u811a\u672c\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Fortinet FortiAnalyzer/FortiManager\u5f00\u653e\u91cd\u5b9a\u5411\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Fortinet FortiAnalyzer \u003c=6.0.0",
      "Fortinet FortiManager \u003c=6.0.0"
    ]
  },
  "referenceLink": "http://www.securityfocus.com/bid/104546",
  "serverity": "\u4e2d",
  "submitTime": "2018-06-28",
  "title": "Fortinet FortiAnalyzer/FortiManager\u5f00\u653e\u91cd\u5b9a\u5411\u6f0f\u6d1e"
}

CVE-2018-1355 (GCVE-0-2018-1355)

Vulnerability from cvelistv5

Published

2018-06-27 20:00

Modified

2024-10-25 14:09

Severity ?

CWE

Execute unauthorized code or commands

Summary

An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature. An attacker may be able to social engineer an authenticated user into generating a PDF file containing injected malicious URLs.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/104546	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1041185	vdb-entry, x_refsource_SECTRACK
	https://fortiguard.com/advisory/FG-IR-18-022	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041184	vdb-entry, x_refsource_SECTRACK

Impacted products

	Vendor	Product	Version
	Fortinet, Inc.	Fortinet FortiManager, FortiAnalyzer	Version: FortiManager 6.0.0, 5.6.5 and below versions Version: FortiAnalyzer 6.0.0, 5.6.5 and below versions

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:59:38.991Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "104546",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104546"
          },
          {
            "name": "1041185",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041185"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://fortiguard.com/advisory/FG-IR-18-022"
          },
          {
            "name": "1041184",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041184"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2018-1355",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-23T14:00:17.334147Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-25T14:09:11.290Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Fortinet FortiManager, FortiAnalyzer",
          "vendor": "Fortinet, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "FortiManager 6.0.0, 5.6.5 and below versions"
            },
            {
              "status": "affected",
              "version": "FortiAnalyzer 6.0.0, 5.6.5 and below versions"
            }
          ]
        }
      ],
      "datePublic": "2018-06-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature.  An attacker may be able to social engineer an authenticated user into generating a PDF file containing injected malicious URLs."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Execute unauthorized code or commands",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-27T12:57:02",
        "orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
        "shortName": "fortinet"
      },
      "references": [
        {
          "name": "104546",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104546"
        },
        {
          "name": "1041185",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041185"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://fortiguard.com/advisory/FG-IR-18-022"
        },
        {
          "name": "1041184",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041184"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@fortinet.com",
          "DATE_PUBLIC": "2018-06-27T00:00:00",
          "ID": "CVE-2018-1355",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Fortinet FortiManager, FortiAnalyzer",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "FortiManager 6.0.0, 5.6.5 and below versions"
                          },
                          {
                            "version_value": "FortiAnalyzer 6.0.0, 5.6.5 and below versions"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Fortinet, Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature.  An attacker may be able to social engineer an authenticated user into generating a PDF file containing injected malicious URLs."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Execute unauthorized code or commands"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "104546",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104546"
            },
            {
              "name": "1041185",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041185"
            },
            {
              "name": "https://fortiguard.com/advisory/FG-IR-18-022",
              "refsource": "CONFIRM",
              "url": "https://fortiguard.com/advisory/FG-IR-18-022"
            },
            {
              "name": "1041184",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041184"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
    "assignerShortName": "fortinet",
    "cveId": "CVE-2018-1355",
    "datePublished": "2018-06-27T20:00:00Z",
    "dateReserved": "2017-12-11T00:00:00",
    "dateUpdated": "2024-10-25T14:09:11.290Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted