Multiple vulnerabilities in FortiSOAR



Risk Medium
Patch available YES
Number of vulnerabilities 3
CVE-ID CVE-2022-30298
CVE-2022-29062
CVE-2022-29061
CWE-ID CWE-269
CWE-22
CWE-78
Exploitation vector Network
Public exploit N/A
Vulnerable software
 FortiSOAR
Server applications / Other server solutions

Vendor Fortinet, Inc

Security Bulletin

This security bulletin contains information about 3 vulnerabilities.

1) Improper Privilege Management

EUVDB-ID: #VU67036

Risk: Medium

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/U:Green]

CVE-ID: CVE-2022-30298

CWE-ID: CWE-269 - Improper Privilege Management

Exploit availability: No

Description

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to improper privilege management within the GUI. A remote user with the ability to create files can execute arbitrary Python commands as root.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

FortiSOAR: 6.4.0 - 7.2.0

CPE2.3 External links

https://fortiguard.fortinet.com/psirt/FG-IR-22-152


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Path traversal

EUVDB-ID: #VU67035

Risk: Low

CVSSv4.0: 1.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-29062

CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Exploit availability: No

Description

The vulnerability allows a remote user to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences in the web API. A remote user can send a specially crafted HTTP request and write arbitrary files on the system with nginx permissions.

Mitigation

Install update from vendor's website.

Vulnerable software versions

FortiSOAR: 7.0.0 - 7.2.0

CPE2.3 External links

https://fortiguard.fortinet.com/psirt/FG-IR-22-154


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) OS Command Injection

EUVDB-ID: #VU67034

Risk: Medium

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-29061

CWE-ID: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Exploit availability: No

Description

The vulnerability allows a remote user to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation in Agent Password Field. A remote user can pass specially crafted data to the application and execute arbitrary OS commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

FortiSOAR: 6.4.0 - 7.2.0

CPE2.3 External links

https://fortiguard.fortinet.com/psirt/FG-IR-22-156


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###