An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiSOAR before 7.2.1 allows an authenticated attacker to execute unauthorized code or commands via crafted HTTP GET requests.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://fortiguard.com/psirt/FG-IR-22-156 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: fortinet
Published: 2022-09-09T06:55:08
Updated: 2024-08-03T06:10:58.942Z
Reserved: 2022-04-11T00:00:00
Link: CVE-2022-29061
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2022-09-09T07:15:07.313
Modified: 2022-09-13T20:44:44.840
Link: CVE-2022-29061
Redhat
No data.