CVE-2015-3617
HighSummary
Fortinet FortiManager versions 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI commands.
Risk Assessment
This vulnerability may lead to unauthorized access to the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update FortiManager to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Fortinet FortiManager
See all- CVE-2015-3614High
Fortinet FortiManager versions 5.0.x before 5.0.11 and 5.2.x before 5.2.2 allow remote attackers to obtain arbitrary files via vectors involving another unspecified vulnerability.
- CVE-2016-8495High
CVE-2016-8495 describes an improper certificate validation vulnerability in Fortinet FortiManager versions 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1. This allows a remote attacker to spoof a trusted entity using a man-in-the-middle (MITM) attack via the Fortisandbox devices probing feature.
- CVE-2024-48884High
A path traversal vulnerability in Fortinet FortiManager, FortiOS, and FortiProxy allows a remote authenticated attacker with access to the Security Fabric interface to write arbitrary files, or an unauthenticated attacker to delete an arbitrary folder.
- CVE-2015-3616Critical
CVE-2015-3616 is an SQL injection vulnerability in Fortinet FortiManager versions 5.0.x before 5.0.11 and 5.2.x before 5.2.2, allowing remote attackers to execute arbitrary commands via unspecified parameters.
Original NVD description (English source)
Fortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI commands.