medium6.1
CVE-2018-1355
An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to injec…
Impact
An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature. An attacker may be able to social engineer an authenticated user into generating a PDF file containing injected malicious URLs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortianalyzer | through 5.6.5 Version 6.0.0 |
| Fortinet | Fortimanager | through 5.6.5 Version 6.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/104546
- http://www.securitytracker.com/id/1041184
- http://www.securitytracker.com/id/1041185
- https://fortiguard.com/advisory/FG-IR-18-022
- http://www.securityfocus.com/bid/104546
- http://www.securitytracker.com/id/1041184
- http://www.securitytracker.com/id/1041185
- https://fortiguard.com/advisory/FG-IR-18-022