Fortinet FortiAnalyzer/FortiManager vulnerabilities

An SQL Injection vulnerability (CWE-89) in Fortinet FortiAnalyzer and FortiManager (including Cloud versions) allows a low-privileged user to execute arbitrary commands via crafted requests. It affects multiple versions of Fortinet software.

Fortinet FortiAnalyzer 7.6.0 through 7.6.2, 7.4.1 through 7.4.6, FortiAnalyzer Cloud 7.6.2, 7.4.1 through 7.4.6, 7.2.1 through 7.2.9, and FortiManager 7.6.0 through 7.6.2, 7.4.0 through 7.4.6 contain an SQL Injection vulnerability (CWE-89). It may allow a low-privileged user to execute arbitrary commands via crafted requests.

Fortinet FortiAnalyzer (versions 7.6.0-7.6.2, 7.4.0-7.4.6, 7.2.0-7.2.13) and FortiManager (versions 7.4.0-7.4.6, 7.2 all versions) contain an SQL Injection vulnerability (CWE-89) that may allow a low-privileged user to execute arbitrary commands via crafted requests.

A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer and FortiManager allows an authenticated attacker to cause a system hang via multiple specially crafted HTTP requests causing crashes. Exploitation depends on internal locks being aligned, which is out of the attacker's control.

A path traversal vulnerability in Fortinet FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests. The issue stems from improper limitation of a pathname to a restricted directory.