A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version 7.0.0 through 7.0.3, 6.4.0 through 6.4.6, 6.2.x, 6.0.x FortiRecorder version 6.4.0 through 6.4.2, 6.0.x, 2.7.x, 2.6.x, FortiNDR version 1.x.x allows a remote unauthenticated attacker to execute commands on the CLI via tricking an authenticated administrator to execute malicious GET requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade olcne-oci-ccm-chartUpgrade istioUpgrade olcne-prometheus-chartUpgrade olcne-api-serverUpgrade kubectlUpgrade kubernetesUpgrade olcne-istio-chartUpgrade olcne-utilsUpgrade olcne-extra-modulesUpgrade olcne-metallb-chartUpgrade olcneUpgrade olcne-nginxUpgrade kubeadmUpgrade olcne-kubevirt-chartUpgrade olcne-grafana-chartUpgrade olcne-rook-chartUpgrade olcne-olm-chartUpgrade istio-istioctlUpgrade olcne-gluster-chartUpgrade olcne-agentUpgrade olcnectlUpgrade kubeletUpgrade olcne-multus-chartUpgrade olcne-calico-chart | May 26, 2023 | May 26, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub