Format string vulnerability in administrative interface

Format string vulnerability in administrative interface Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-23-304 Final 1 1 2024-03-12T00:00:00 Current version 2024-03-12T00:00:00 2024-03-07T00:00:00 A use of externally-controlled format string vulnerability [CWE-134] in FortiManager, FortiAnalyzer, FortiAnalyzer-BigData & FortiPortal may allow a privileged attacker to execute unauthorized code or commands via specially crafted command arguments. None Execute unauthorized code or commands FortiPortal 7.2 all versions are not affectedFortiPortal 7.0 all versions are not affectedFortiPortal version 6.0.0 through 6.0.14FortiPortal 5.3 all versionsFortiManager version 7.4.0 through 7.4.1FortiManager version 7.2.0 through 7.2.3FortiManager version 7.0.0 through 7.0.9FortiManager 6.4 all versionsFortiManager 6.2 all versionsFortiAnalyzer-BigData 7.4 all versions are not affectedFortiAnalyzer-BigData version 7.2.0 through 7.2.5FortiAnalyzer-BigData 7.0 all versionsFortiAnalyzer-BigData 6.4 all versionsFortiAnalyzer-BigData 6.2 all versionsFortiAnalyzer version 7.4.0 through 7.4.1FortiAnalyzer version 7.2.0 through 7.2.3FortiAnalyzer version 7.0.0 through 7.0.9FortiAnalyzer 6.4 all versionsFortiAnalyzer 6.2 all versions Please upgrade to FortiPortal version 6.0.15 or above Please upgrade to FortiAnalyzer-BigData version 7.4.0 or above Please upgrade to FortiAnalyzer-BigData version 7.2.6 or above Please upgrade to FortiManager version 7.4.2 or above Please upgrade to FortiManager version 7.2.4 or above Please upgrade to FortiManager version 7.0.10 or above Please upgrade to FortiAnalyzer version 7.4.2 or abovePlease upgrade to FortiAnalyzer version 7.2.4 or abovePlease upgrade to FortiAnalyzer version 7.0.10 or above Internally discovered and reported by Diego Bernardelli from Fortinet's advanced TAC support team. FortiAnalyzer 7.4.1 FortiAnalyzer 7.4.0 FortiAnalyzer 7.2.3 FortiAnalyzer 7.2.2 FortiAnalyzer 7.2.1 FortiAnalyzer 7.2.0 FortiAnalyzer 7.0.9 FortiAnalyzer 7.0.8 FortiAnalyzer 7.0.7 FortiAnalyzer 7.0.6 FortiAnalyzer 7.0.5 FortiAnalyzer 7.0.4 FortiAnalyzer 7.0.3 FortiAnalyzer 7.0.2 FortiAnalyzer 7.0.1 FortiAnalyzer 7.0.0 FortiAnalyzer 6.4.15 FortiAnalyzer 6.4.14 FortiAnalyzer 6.4.13 FortiAnalyzer 6.4.12 FortiAnalyzer 6.4.11 FortiAnalyzer 6.4.10 FortiAnalyzer 6.4.9 FortiAnalyzer 6.4.8 FortiAnalyzer 6.4.7 FortiAnalyzer 6.4.6 FortiAnalyzer 6.4.5 FortiAnalyzer 6.4.4 FortiAnalyzer 6.4.3 FortiAnalyzer 6.4.2 FortiAnalyzer 6.4.1 FortiAnalyzer 6.4.0 FortiAnalyzer 6.2.13 FortiAnalyzer 6.2.12 FortiAnalyzer 6.2.11 FortiAnalyzer 6.2.10 FortiAnalyzer 6.2.9 FortiAnalyzer 6.2.8 FortiAnalyzer 6.2.7 FortiAnalyzer 6.2.6 FortiAnalyzer 6.2.5 FortiAnalyzer 6.2.4 FortiAnalyzer 6.2.3 FortiAnalyzer 6.2.2 FortiAnalyzer 6.2.1 FortiAnalyzer 6.2.0 FortiAnalyzer-BigData 7.2.5 FortiAnalyzer-BigData 7.2.4 FortiAnalyzer-BigData 7.2.3 FortiAnalyzer-BigData 7.2.2 FortiAnalyzer-BigData 7.2.1 FortiAnalyzer-BigData 7.2.0 FortiAnalyzer-BigData 7.0.6 FortiAnalyzer-BigData 7.0.5 FortiAnalyzer-BigData 7.0.4 FortiAnalyzer-BigData 7.0.3 FortiAnalyzer-BigData 7.0.2 FortiAnalyzer-BigData 7.0.1 FortiAnalyzer-BigData 6.4.7 FortiAnalyzer-BigData 6.4.6 FortiAnalyzer-BigData 6.4.5 FortiAnalyzer-BigData 6.2.5 FortiManager 7.4.1 FortiManager 7.4.0 FortiManager 7.2.3 FortiManager 7.2.2 FortiManager 7.2.1 FortiManager 7.2.0 FortiManager 7.0.9 FortiManager 7.0.8 FortiManager 7.0.7 FortiManager 7.0.6 FortiManager 7.0.5 FortiManager 7.0.4 FortiManager 7.0.3 FortiManager 7.0.2 FortiManager 7.0.1 FortiManager 7.0.0 FortiManager 6.4.15 FortiManager 6.4.14 FortiManager 6.4.13 FortiManager 6.4.12 FortiManager 6.4.11 FortiManager 6.4.10 FortiManager 6.4.9 FortiManager 6.4.8 FortiManager 6.4.7 FortiManager 6.4.6 FortiManager 6.4.5 FortiManager 6.4.4 FortiManager 6.4.3 FortiManager 6.4.2 FortiManager 6.4.1 FortiManager 6.4.0 FortiManager 6.2.13 FortiManager 6.2.12 FortiManager 6.2.11 FortiManager 6.2.10 FortiManager 6.2.9 FortiManager 6.2.8 FortiManager 6.2.7 FortiManager 6.2.6 FortiManager 6.2.5 FortiManager 6.2.4 FortiManager 6.2.3 FortiManager 6.2.2 FortiManager 6.2.1 FortiManager 6.2.0 FortiPortal 6.0.14 FortiPortal 6.0.13 FortiPortal 6.0.12 FortiPortal 6.0.11 FortiPortal 6.0.10 FortiPortal 6.0.9 FortiPortal 6.0.8 FortiPortal 6.0.7 FortiPortal 6.0.6 FortiPortal 6.0.5 FortiPortal 6.0.4 FortiPortal 6.0.3 FortiPortal 6.0.2 FortiPortal 6.0.1 FortiPortal 6.0.0 FortiPortal 5.3.8 FortiPortal 5.3.7 FortiPortal 5.3.6 FortiPortal 5.3.5 FortiPortal 5.3.4 FortiPortal 5.3.3 FortiPortal 5.3.2 FortiPortal 5.3.1 FortiPortal 5.3.0 Format string vulnerability in administrative interface CVE-2023-41842 FortiAnalyzer-7.4.1 FortiAnalyzer-7.4.0 FortiAnalyzer-7.2.3 FortiAnalyzer-7.2.2 FortiAnalyzer-7.2.1 FortiAnalyzer-7.2.0 FortiAnalyzer-7.0.9 FortiAnalyzer-7.0.8 FortiAnalyzer-7.0.7 FortiAnalyzer-7.0.6 FortiAnalyzer-7.0.5 FortiAnalyzer-7.0.4 FortiAnalyzer-7.0.3 FortiAnalyzer-7.0.2 FortiAnalyzer-7.0.1 FortiAnalyzer-7.0.0 FortiAnalyzer-6.4.15 FortiAnalyzer-6.4.14 FortiAnalyzer-6.4.13 FortiAnalyzer-6.4.12 FortiAnalyzer-6.4.11 FortiAnalyzer-6.4.10 FortiAnalyzer-6.4.9 FortiAnalyzer-6.4.8 FortiAnalyzer-6.4.7 FortiAnalyzer-6.4.6 FortiAnalyzer-6.4.5 FortiAnalyzer-6.4.4 FortiAnalyzer-6.4.3 FortiAnalyzer-6.4.2 FortiAnalyzer-6.4.1 FortiAnalyzer-6.4.0 FortiAnalyzer-6.2.13 FortiAnalyzer-6.2.12 FortiAnalyzer-6.2.11 FortiAnalyzer-6.2.10 FortiAnalyzer-6.2.9 FortiAnalyzer-6.2.8 FortiAnalyzer-6.2.7 FortiAnalyzer-6.2.6 FortiAnalyzer-6.2.5 FortiAnalyzer-6.2.4 FortiAnalyzer-6.2.3 FortiAnalyzer-6.2.2 FortiAnalyzer-6.2.1 FortiAnalyzer-6.2.0 FortiAnalyzer-BigData-7.2.5 FortiAnalyzer-BigData-7.2.4 FortiAnalyzer-BigData-7.2.3 FortiAnalyzer-BigData-7.2.2 FortiAnalyzer-BigData-7.2.1 FortiAnalyzer-BigData-7.2.0 FortiAnalyzer-BigData-7.0.6 FortiAnalyzer-BigData-7.0.5 FortiAnalyzer-BigData-7.0.4 FortiAnalyzer-BigData-7.0.3 FortiAnalyzer-BigData-7.0.2 FortiAnalyzer-BigData-7.0.1 FortiAnalyzer-BigData-6.4.7 FortiAnalyzer-BigData-6.4.6 FortiAnalyzer-BigData-6.4.5 FortiAnalyzer-BigData-6.2.5 FortiManager-7.4.1 FortiManager-7.4.0 FortiManager-7.2.3 FortiManager-7.2.2 FortiManager-7.2.1 FortiManager-7.2.0 FortiManager-7.0.9 FortiManager-7.0.8 FortiManager-7.0.7 FortiManager-7.0.6 FortiManager-7.0.5 FortiManager-7.0.4 FortiManager-7.0.3 FortiManager-7.0.2 FortiManager-7.0.1 FortiManager-7.0.0 FortiManager-6.4.15 FortiManager-6.4.14 FortiManager-6.4.13 FortiManager-6.4.12 FortiManager-6.4.11 FortiManager-6.4.10 FortiManager-6.4.9 FortiManager-6.4.8 FortiManager-6.4.7 FortiManager-6.4.6 FortiManager-6.4.5 FortiManager-6.4.4 FortiManager-6.4.3 FortiManager-6.4.2 FortiManager-6.4.1 FortiManager-6.4.0 FortiManager-6.2.13 FortiManager-6.2.12 FortiManager-6.2.11 FortiManager-6.2.10 FortiManager-6.2.9 FortiManager-6.2.8 FortiManager-6.2.7 FortiManager-6.2.6 FortiManager-6.2.5 FortiManager-6.2.4 FortiManager-6.2.3 FortiManager-6.2.2 FortiManager-6.2.1 FortiManager-6.2.0 FortiPortal-6.0.14 FortiPortal-6.0.13 FortiPortal-6.0.12 FortiPortal-6.0.11 FortiPortal-6.0.10 FortiPortal-6.0.9 FortiPortal-6.0.8 FortiPortal-6.0.7 FortiPortal-6.0.6 FortiPortal-6.0.5 FortiPortal-6.0.4 FortiPortal-6.0.3 FortiPortal-6.0.2 FortiPortal-6.0.1 FortiPortal-6.0.0 FortiPortal-5.3.8 FortiPortal-5.3.7 FortiPortal-5.3.6 FortiPortal-5.3.5 FortiPortal-5.3.4 FortiPortal-5.3.3 FortiPortal-5.3.2 FortiPortal-5.3.1 FortiPortal-5.3.0 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C https://fortiguard.fortinet.com/psirt/FG-IR-23-304 Format string vulnerability in administrative interface Reference>