CVE-2015-3617: High severity fortinet fortimanager vulnerability
Published Aug 22, 2017
·Updated
Fortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI commands.
Affected Software
13 affected components
Fortinet Fortimanager Firmware=5.0.0
Fortinet Fortimanager Firmware=5.0.1
Fortinet Fortimanager Firmware=5.0.2
Fortinet Fortimanager Firmware=5.0.3
Fortinet Fortimanager Firmware=5.0.4
Fortinet Fortimanager Firmware=5.0.5
Fortinet Fortimanager Firmware=5.0.6
Fortinet Fortimanager Firmware=5.0.7
Fortinet Fortimanager Firmware=5.0.8
Fortinet Fortimanager Firmware=5.0.9
Fortinet Fortimanager Firmware=5.0.10
Fortinet Fortimanager Firmware=5.2.0
Fortinet Fortimanager Firmware=5.2.1
Event History
Aug 22, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-3617?
CVE-2015-3617 has a medium severity rating due to its potential to allow local users to escalate privileges.
2
How do I fix CVE-2015-3617?
To fix CVE-2015-3617, upgrade Fortinet FortiManager to version 5.0.11 or later, or version 5.2.2 or later.
3
Which versions of FortiManager are affected by CVE-2015-3617?
CVE-2015-3617 impacts FortiManager versions 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1.
4
What types of commands can exploit CVE-2015-3617?
CVE-2015-3617 can be exploited using crafted CLI commands by local users.
5
Are there any mitigation strategies for CVE-2015-3617?
Temporary mitigation can include restricting local access to FortiManager until an upgrade is performed.