What is the severity of CVE-2018-1355?

The severity of CVE-2018-1355 is medium.

How does CVE-2018-1355 affect Fortinet FortiAnalyzer and FortiManager?

CVE-2018-1355 affects Fortinet FortiAnalyzer versions 5.6.5 and below, and FortiManager versions 5.6.5 and below.

What is an open redirect vulnerability?

An open redirect vulnerability is a security flaw that allows an attacker to redirect a user to a malicious website.

What are the possible impacts of CVE-2018-1355?

CVE-2018-1355 could allow an attacker to inject malicious script code and potentially conduct social engineering attacks.

Are there any known fixes for CVE-2018-1355?

Currently, there are no known fixes for CVE-2018-1355. It is recommended to apply any available security patches or updates from the vendor.

Vulnerability/
CVE-2018-1355

medium

6.1

CWE

601

27/6/2018

8/3/2019

CVE-2018-1355

First published: Wed Jun 27 2018(Updated: )

An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature. An attacker may be able to social engineer an authenticated user into generating a PDF file containing injected malicious URLs.

Credit: psirt@fortinet.com

Affected Software	Affected Version	How to fix
Fortinet FortiAnalyzer	<=5.6.5
Fortinet FortiAnalyzer	=6.0.0
Fortinet FortiManager	<=5.6.5
Fortinet FortiManager	=6.0.0

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2018-1355?
The severity of CVE-2018-1355 is medium.
How does CVE-2018-1355 affect Fortinet FortiAnalyzer and FortiManager?
CVE-2018-1355 affects Fortinet FortiAnalyzer versions 5.6.5 and below, and FortiManager versions 5.6.5 and below.
What is an open redirect vulnerability?
An open redirect vulnerability is a security flaw that allows an attacker to redirect a user to a malicious website.
What are the possible impacts of CVE-2018-1355?
CVE-2018-1355 could allow an attacker to inject malicious script code and potentially conduct social engineering attacks.
Are there any known fixes for CVE-2018-1355?
Currently, there are no known fixes for CVE-2018-1355. It is recommended to apply any available security patches or updates from the vendor.

collector/nvd-index
agent/severity
agent/weakness
agent/references
agent/author
agent/tags
agent/type
agent/description
agent/event
agent/first-publish-date
agent/softwarecombine
vendor/fortinet
canonical/fortinet fortianalyzer
version/fortinet fortianalyzer/5.6.5
version/fortinet fortianalyzer/6.0.0
canonical/fortinet fortimanager
version/fortinet fortimanager/5.6.5
version/fortinet fortimanager/6.0.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.