imPC@ndo IT

Tracker / CVE-2020-12815

CVE-2020-12815

Medium 5.4

An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker to inject script related HTML tags via IPv4/IPv6 address fields.

Affected products and versions

fortinet fortianalyzer · … → 6.2.5
fortinet fortianalyzer · 6.4.0 → 6.4.1
fortinet fortitester
fortinet fortitester · … → 3.7.0

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References