EN

high

Fortinet FortiAnalyzer und FortiManager: SQL injection possible

CERT-Bund (BSI) reports several vulnerabilities in Fortinet FortiAnalyzer und FortiManager with severity high. The stated impact is SQL injection. The full description, affected versions and recommended action are available from CERT-Bund (BSI).

What this means for you

The application can be used to reach the database behind it. Check the logs before you patch: unusual queries suggest the flaw has already been used.

Original source

CERT-Bund (BSI)

Contact

Reputation takes years. Destruction takes seconds.

Talk to us before somebody else does. The first conversation is free and we reply the same business day.