admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update fortinet_fortinac_cve_2022_39952.yml

Browse Source
This commit is contained in:
Michael Haag
2023-02-21 11:07:04 -07:00
parent 92dcbcec70
commit b65986eb71
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
stories/fortinet_fortinac_cve_2022_39952.yml
+1 -1
View File
@@ -7,7 +7,7 @@ description: On Thursday, 16 February 2022, Fortinet released a PSIRT that detai
narrative: This vulnerability, discovered by Gwendal Guégniaud of Fortinet, allows an unauthenticated attacker to write arbitrary files on the system and as a result obtain remote code execution in the context of the root user (Horizon3.ai).
Impacting FortiNAC, is tracked as CVE-2022-39952 and has a CVSS v3 score of 9.8 (critical).
FortiNAC is a network access control solution that helps organizations gain real-time network visibility, enforce security policies, and detect and mitigate threats.
"An external control of file name or path vulnerability [CWE-73] in FortiNAC webserver may allow an unauthenticated attacker to perform arbitrary write on the system," reads the security advisory.
An external control of file name or path vulnerability [CWE-73] in FortiNAC webserver may allow an unauthenticated attacker to perform arbitrary write on the system, reads the security advisory.
references:
- https://www.horizon3.ai/fortinet-fortinac-cve-2022-39952-deep-dive-and-iocs/
- https://viz.greynoise.io/tag/fortinac-rce-attempt?days=30