FortiDDoS Command Injection Vulnerability Announcement

Summary

A vulnerability in FortiDDoS allows escalation of privilege via remote OS injection through crafted URLs sent to the GUI. The user is required to be logged in for an exploit to work.

Affected Products

FortiDDoS (Series B models only) versions below and including 4.2.2

Solutions

Upgrade to versions 4.2.3

Acknowledgement

Fortinet is pleased to thank Juan Pablo Lopez Yacubian for reporting this vulnerability under responsible disclosure

References

  • -