CVE-2015-3611: OS Command Injection

Q: What is CVE-2015-3611?

CVE-2015-3611 is a Command Injection vulnerability that exists in FortiManager 5.2.1 and earlier and FortiManager 5.0.10 and earlier.

Q: How severe is CVE-2015-3611?

CVE-2015-3611 has a severity rating of 8.8 (critical).

Q: How can a malicious user exploit CVE-2015-3611?

A malicious user can exploit CVE-2015-3611 by executing system commands when executing a report on FortiManager 5.2.1 and earlier and FortiManager 5.0.10 and earlier.

Q: Which software versions are affected by CVE-2015-3611?

FortiManager versions 5.2.1 and earlier and FortiManager versions 5.0.10 and earlier are affected by CVE-2015-3611.

Q: Are there any known fixes for CVE-2015-3611?

Please refer to the official references for information on fixes for CVE-2015-3611.

Published Feb 4, 2020

Updated

A Command Injection vulnerability exists in FortiManager 5.2.1 and earlier and FortiManager 5.0.10 and earlier via unspecified vectors, which could let a malicious user run systems commands when executing a report.

Affected Software

2 affected components

Fortinet FortiManager>=5.0.0<=5.0.10

Fortinet FortiManager>=5.2.0<=5.2.1

Event History

Feb 4, 2020

CVE Published

via MITRE·07:14 PM

Data Sourced

via MITRE·07:14 PM

Description

Frequently Asked Questions

What is CVE-2015-3611?

CVE-2015-3611 is a Command Injection vulnerability that exists in FortiManager 5.2.1 and earlier and FortiManager 5.0.10 and earlier.

How severe is CVE-2015-3611?

CVE-2015-3611 has a severity rating of 8.8 (critical).

How can a malicious user exploit CVE-2015-3611?

A malicious user can exploit CVE-2015-3611 by executing system commands when executing a report on FortiManager 5.2.1 and earlier and FortiManager 5.0.10 and earlier.

Which software versions are affected by CVE-2015-3611?

FortiManager versions 5.2.1 and earlier and FortiManager versions 5.0.10 and earlier are affected by CVE-2015-3611.

Are there any known fixes for CVE-2015-3611?