CVE-2017-3132: XSS
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action input during the activation of a FortiToken.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3132?
CVE-2017-3132 is classified as a high severity vulnerability due to its potential to allow unauthorized code execution.
How do I fix CVE-2017-3132?
To mitigate CVE-2017-3132, upgrade FortiOS to a version later than 5.6.0 where the vulnerability is patched.
What types of systems are affected by CVE-2017-3132?
CVE-2017-3132 affects Fortinet FortiOS versions up to and including 5.6.0.
Can CVE-2017-3132 lead to data theft?
Yes, CVE-2017-3132 can potentially lead to data theft as it allows attackers to execute unauthorized commands.
What does Cross-Site Scripting mean in the context of CVE-2017-3132?
In the context of CVE-2017-3132, Cross-Site Scripting (XSS) refers to the vulnerability that allows attackers to inject malicious scripts via the FortiToken activation process.