medium6.6
CVE-2023-45584
A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versi…
Impact
A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.1, FortiProxy 7.2.0 through 7.2.7, FortiProxy 7.0.0 through 7.0.13 allows a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortios | from 6.4.0 before 7.0.13 from 7.2.0 before 7.2.6 Version 7.4.0 |
| Fortinet | Fortipam | from 1.0.0 through 1.1.2 |
| Fortinet | Fortiproxy | from 7.0.0 before 7.0.14 from 7.2.0 before 7.2.8 from 7.4.0 before 7.4.2 |