Vulnerabilityhigh

Fortinet addresses 4 vulnerabilities in FortiWeb web application firewalls

Security Affairsby @securityaffairsFeb 5, 2021 · 08:33 UTC (Feb 5, 2021)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2020-29015 CVE-2020-29016 CVE-2020-29019 CVE-2020-29018

Tags: cve-2020-29015 cve-2020-29016 cve-2020-29019 cve-2020-29018 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-29016 +3 related CVEs CVE-2020-29015 CVE-2020-29018 CVE-2020-29019	A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4 may allow an unauthenticated, remote attacker to overwrite…	9.8 group max	3%		Jan 14, 2021

From the original article

2 min read at securityaffairs.com

Security vendor Fortinet has addressed four vulnerabilities in FortiWeb web application firewalls, including a Remote Code Execution flaw. Fortinet has addressed four vulnerabilities in FortiWeb web application firewalls that were reported by Positive Technologies expert Andrey Medov. The first vulnerability, tracked as CVE-2020-29015 , is a blind SQL injection that resides in the FortiWeb user interface.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.