CVE-2015-3616

Critical

Published: 11/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2015-3616 is an SQL injection vulnerability in Fortinet FortiManager versions 5.0.x before 5.0.11 and 5.2.x before 5.2.2, allowing remote attackers to execute arbitrary commands via unspecified parameters.

Risk Assessment

Attackers can exploit this vulnerability to gain control over the system, potentially leading to serious security implications for the organization.

Recommendation

It is recommended to update FortiManager to the latest version to eliminate this vulnerability and implement additional security measures such as log monitoring and access restrictions.

Original NVD description (English source)

SQL injection vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to execute arbitrary commands via unspecified parameters.