Vulnerability-Lookup

CERTFR-2024-AVI-0561

Vulnerability from certfr_avis - Published: 2024-07-10 - Updated: 2024-07-10

De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Fortinet	N/A	FortiADC versions 7.4.x antérieures à 7.4.2
Fortinet	N/A	FortiADC versions antérieures à 7.2.5
Fortinet	N/A	FortiWeb versions antérieures à 7.2.2
Fortinet	N/A	FortiPortal versions 7.2.x antérieures à 7.2.1
Fortinet	N/A	FortiOS versions antérieures à 7.4.4
Fortinet	N/A	FortiExtender versions 7.2.x antérieures à 7.2.5
Fortinet	N/A	FortiExtender versions 7.4.x antérieures à 7.4.3
Fortinet	N/A	FortiProxy versions antérieures à 7.4.4
Fortinet	N/A	FortiExtender versions 7.0.x antérieures à 7.0.5
Fortinet	N/A	FortiPortal versions 7.0.x antérieures à 7.0.7
Fortinet	N/A	FortiAIOps versions 2.0.x antérieures à 2.0.1

References

Title

Publication Time

Tags

Bulletin de sécurité Fortinet FG-IR-24-072	2024-07-09	vendor-advisory
Bulletin de sécurité Fortinet FG-IR-23-469	2024-07-09	vendor-advisory
Bulletin de sécurité Fortinet FG-IR-23-446	2024-07-09	vendor-advisory
Bulletin de sécurité Fortinet FG-IR-24-073	2024-07-09	vendor-advisory
Bulletin de sécurité Fortinet FG-IR-24-011	2024-07-09	vendor-advisory
Bulletin de sécurité Fortinet FG-IR-24-070	2024-07-09	vendor-advisory
Bulletin de sécurité Fortinet FG-IR-22-326	2024-07-09	vendor-advisory
Bulletin de sécurité Fortinet FG-IR-24-069	2024-07-09	vendor-advisory
Bulletin de sécurité Fortinet FG-IR-23-485	2024-07-09	vendor-advisory
Bulletin de sécurité Fortinet FG-IR-22-298	2024-07-09	vendor-advisory
Bulletin de sécurité Fortinet FG-IR-23-459	2024-07-09	vendor-advisory
Bulletin de sécurité Fortinet FG-IR-23-480	2024-07-09	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "FortiADC versions 7.4.x ant\u00e9rieures \u00e0 7.4.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiADC versions ant\u00e9rieures \u00e0 7.2.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiWeb versions ant\u00e9rieures \u00e0 7.2.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiPortal versions 7.2.x ant\u00e9rieures \u00e0 7.2.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiOS versions ant\u00e9rieures \u00e0 7.4.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiExtender versions 7.2.x ant\u00e9rieures \u00e0 7.2.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiExtender versions 7.4.x ant\u00e9rieures \u00e0 7.4.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiProxy versions ant\u00e9rieures \u00e0 7.4.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiExtender versions 7.0.x ant\u00e9rieures \u00e0 7.0.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiPortal versions 7.0.x ant\u00e9rieures \u00e0 7.0.7",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    },
    {
      "description": "FortiAIOps versions 2.0.x ant\u00e9rieures \u00e0 2.0.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Fortinet",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-23663",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-23663"
    },
    {
      "name": "CVE-2024-27785",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27785"
    },
    {
      "name": "CVE-2023-50178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-50178"
    },
    {
      "name": "CVE-2024-27783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27783"
    },
    {
      "name": "CVE-2024-26015",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26015"
    },
    {
      "name": "CVE-2024-26006",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-26006"
    },
    {
      "name": "CVE-2023-50179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-50179"
    },
    {
      "name": "CVE-2024-27784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27784"
    },
    {
      "name": "CVE-2024-21759",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21759"
    },
    {
      "name": "CVE-2024-33509",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-33509"
    },
    {
      "name": "CVE-2024-27782",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27782"
    },
    {
      "name": "CVE-2023-50181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-50181"
    }
  ],
  "initial_release_date": "2024-07-10T00:00:00",
  "last_revision_date": "2024-07-10T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0561",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Fortinet. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Fortinet",
  "vendor_advisories": [
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-072",
      "url": "https://www.fortiguard.com/psirt/FG-IR-24-072"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-23-469",
      "url": "https://www.fortiguard.com/psirt/FG-IR-23-469"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-23-446",
      "url": "https://www.fortiguard.com/psirt/FG-IR-23-446"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-073",
      "url": "https://www.fortiguard.com/psirt/FG-IR-24-073"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-011",
      "url": "https://www.fortiguard.com/psirt/FG-IR-24-011"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-070",
      "url": "https://www.fortiguard.com/psirt/FG-IR-24-070"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-22-326",
      "url": "https://www.fortiguard.com/psirt/FG-IR-22-326"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-069",
      "url": "https://www.fortiguard.com/psirt/FG-IR-24-069"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-23-485",
      "url": "https://www.fortiguard.com/psirt/FG-IR-23-485"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-22-298",
      "url": "https://www.fortiguard.com/psirt/FG-IR-22-298"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-23-459",
      "url": "https://www.fortiguard.com/psirt/FG-IR-23-459"
    },
    {
      "published_at": "2024-07-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-23-480",
      "url": "https://www.fortiguard.com/psirt/FG-IR-23-480"
    }
  ]
}

CVE-2024-27785 (GCVE-0-2024-27785)

Vulnerability from cvelistv5 – Published: 2024-07-09 15:33 – Updated: 2026-01-09 16:32

Summary

An improper neutralization of formula elements in a CSV File [CWE-1236] vulnerability in Fortinet FortiAIOps 2.0.0 may allow a remote authenticated attacker to execute arbitrary commands on a client's workstation via poisoned CSV reports.

Severity

5.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L/E:P/RL:U/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-1236 - Execute unauthorized code or commands

Assigner

fortinet

References

1 reference

URL	Tags
https://fortiguard.fortinet.com/psirt/FG-IR-24-073

Impacted products

1 product

Vendor	Product	Version
Fortinet	FortiAIOps	Affected: 2.0.0 cpe:2.3:a:fortinet:fortiaiops:2.0.0:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-27785",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-09T17:49:34.425635Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-09T17:49:43.410Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T00:41:54.443Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://fortiguard.fortinet.com/psirt/FG-IR-24-073",
            "tags": [
              "x_transferred"
            ],
            "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-073"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:fortinet:fortiaiops:2.0.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "FortiAIOps",
          "vendor": "Fortinet",
          "versions": [
            {
              "status": "affected",
              "version": "2.0.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An improper neutralization of formula elements in a CSV File [CWE-1236] vulnerability in Fortinet FortiAIOps 2.0.0 may allow a remote authenticated attacker to execute arbitrary commands on a client\u0027s workstation via poisoned CSV reports."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L/E:P/RL:U/RC:C",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1236",
              "description": "Execute unauthorized code or commands",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-09T16:32:32.996Z",
        "orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
        "shortName": "fortinet"
      },
      "references": [
        {
          "name": "https://fortiguard.fortinet.com/psirt/FG-IR-24-073",
          "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-073"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to FortiAIOps version 2.0.1 or above"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
    "assignerShortName": "fortinet",
    "cveId": "CVE-2024-27785",
    "datePublished": "2024-07-09T15:33:27.182Z",
    "dateReserved": "2024-02-26T14:46:31.335Z",
    "dateUpdated": "2026-01-09T16:32:32.996Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-33509 (GCVE-0-2024-33509)

Vulnerability from cvelistv5 – Published: 2024-07-09 15:33 – Updated: 2024-08-02 02:36

Summary

An improper certificate validation vulnerability [CWE-295] in FortiWeb 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions and 6.3 all versions may allow a remote and unauthenticated attacker in a Man-in-the-Middle position to decipher and/or tamper with the communication channel between the device and different endpoints used to fetch data for Web Application Firewall (WAF).

Severity

4.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:R

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-295 - Information disclosure

Assigner

fortinet

References

1 reference

URL	Tags
https://fortiguard.fortinet.com/psirt/FG-IR-22-326

Impacted products

2 products

Vendor	Product	Version
Fortinet	FortiWeb	Affected: 7.2.0 , ≤ 7.2.1 (semver) Affected: 7.0.0 , ≤ 7.0.10 (semver) Affected: 6.4.0 , ≤ 6.4.3 (semver) Affected: 6.3.0 , ≤ 6.3.23 (semver)
fortinet	fortiweb	Affected: 7.2.0 Affected: 7.0.0 Affected: 6.4.0 Affected: 6.3.0 cpe:2.3:a:fortinet:fortiweb::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "fortiweb",
            "vendor": "fortinet",
            "versions": [
              {
                "status": "affected",
                "version": "7.2.0"
              },
              {
                "status": "affected",
                "version": "7.0.0"
              },
              {
                "status": "affected",
                "version": "6.4.0"
              },
              {
                "status": "affected",
                "version": "6.3.0"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-33509",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-09T15:48:02.416435Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-11T15:04:39.003Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T02:36:02.831Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://fortiguard.fortinet.com/psirt/FG-IR-22-326",
            "tags": [
              "x_transferred"
            ],
            "url": "https://fortiguard.fortinet.com/psirt/FG-IR-22-326"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "FortiWeb",
          "vendor": "Fortinet",
          "versions": [
            {
              "lessThanOrEqual": "7.2.1",
              "status": "affected",
              "version": "7.2.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.0.10",
              "status": "affected",
              "version": "7.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.3",
              "status": "affected",
              "version": "6.4.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.3.23",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An improper certificate validation vulnerability [CWE-295] in FortiWeb 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions and 6.3 all versions may allow a remote and unauthenticated attacker in a Man-in-the-Middle position to decipher and/or tamper with the communication channel between the device and different endpoints used to fetch data for Web Application Firewall (WAF)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:R",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "Information disclosure",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-09T15:33:24.418Z",
        "orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
        "shortName": "fortinet"
      },
      "references": [
        {
          "name": "https://fortiguard.fortinet.com/psirt/FG-IR-22-326",
          "url": "https://fortiguard.fortinet.com/psirt/FG-IR-22-326"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Please upgrade to FortiWeb version 7.2.2 or above \n"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
    "assignerShortName": "fortinet",
    "cveId": "CVE-2024-33509",
    "datePublished": "2024-07-09T15:33:24.418Z",
    "dateReserved": "2024-04-23T14:18:29.831Z",
    "dateUpdated": "2024-08-02T02:36:02.831Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTFR-2024-AVI-0561

Solutions

CVE-2024-27785 (GCVE-0-2024-27785)

CVE-2024-33509 (GCVE-0-2024-33509)

Tags

Sightings

Nomenclature