CVE-2021-32590critical

CVE-2021-32590

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.9epss 1.7%

probabilidade de exploração

1.7%top 24% das CVEs

exploração observada

nãonenhuma fonte reporta

Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5, and 4.2.2 and earlier may allow an attacker with regular user's privileges to execute arbitrary commands on the underlying SQL database via specifically crafted HTTP requests.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:U/RC:C

Produtos afetados

Fortinet · Fortinet FortiPortal

Referências

https://fortiguard.com/advisory/FG-IR-21-084