vulnerability
Fortinet FortiManager: URL Redirection to Untrusted Site ('Open Redirect') (CVE-2018-1355)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:M/Au:N/C:P/I:P/A:N) | Jun 27, 2018 | Jul 26, 2021 | Nov 27, 2024 |
Severity
6
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:N)
Published
Jun 27, 2018
Added
Jul 26, 2021
Modified
Nov 27, 2024
Description
An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature. An attacker may be able to social engineer an authenticated user into generating a PDF file containing injected malicious URLs.
Solutions
fortinet-fortimanager-upgrade-5_6_5fortinet-fortimanager-upgrade-5_6_6
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.