CVE-2024-48889: OS command injection
First published: Wed Dec 18 2024(Updated: )
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiManager may allow an authenticated remote attacker to execute unauthorized code via FGFM crafted requests.
Credit: psirt@fortinet.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fortinet FortiManager | =. | |
| Fortinet FortiManager | >=7.4.0<=7.4.4 | |
| Fortinet FortiManager | >=7.4.1<=7.4.4 | |
| Fortinet FortiManager | >=7.2.3<=7.2.7 | |
| Fortinet FortiManager | >=7.2.1<=7.2.7 | |
| Fortinet FortiManager | >=7.0.5<=7.0.12 | |
| Fortinet FortiManager | >=7.0.1<=7.0.12 | |
| Fortinet FortiManager | >=6.4.10<=6.4.14 |
Remedy
Please upgrade to FortiManager version 7.6.1 or above Please upgrade to FortiManager version 7.4.5 or above Please upgrade to FortiManager version 7.2.8 or above Please upgrade to FortiManager version 7.0.13 or above Please upgrade to FortiManager version 6.4.15 or above Please upgrade to FortiManager Cloud version 7.6.2 or above Please upgrade to FortiManager Cloud version 7.4.5 or above Please upgrade to FortiManager Cloud version 7.2.8 or above Please upgrade to FortiManager Cloud version 7.0.13 or above
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/remedy
- agent/type
- agent/author
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/first-publish-date
- collector/fortiguard-psirt
- source/FortiGuard
- alias/CVE-2024-48889
- agent/software-canonical-lookup
- agent/severity
- agent/references
- agent/title
- agent/softwarecombine
- agent/description
- agent/tags
- collector/fortiguard-psirt-latest
- agent/event
- agent/trending
- vendor/fortinet
- canonical/fortinet fortimanager
- version/fortinet fortimanager/.
- version/fortinet fortimanager/7.4.0
- version/fortinet fortimanager/7.4.4
- version/fortinet fortimanager/7.4.1
- version/fortinet fortimanager/7.2.3
- version/fortinet fortimanager/7.2.7
- version/fortinet fortimanager/7.2.1
- version/fortinet fortimanager/7.0.5
- version/fortinet fortimanager/7.0.12
- version/fortinet fortimanager/7.0.1
- version/fortinet fortimanager/6.4.10
- version/fortinet fortimanager/6.4.14