CVE-2018-1355

EPSS 1.6%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 1.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

27 jun 2018Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature. An attacker may be able to social engineer an authenticated user into generating a PDF file containing injected malicious URLs.

Produtos afetados

Fortinet, Inc. · Fortinet FortiManager, FortiAnalyzer

Referências

https://fortiguard.com/advisory/FG-IR-18-022 http://www.securityfocus.com/bid/104546 http://www.securitytracker.com/id/1041184 http://www.securitytracker.com/id/1041185