N/A

An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature. An attacker may be able to social engineer an authenticated user into generating a PDF file containing injected malicious URLs.

N/A

N/A

Fortinet FortiManager和FortiAnalyzer 安全漏洞

Fortinet FortiManager和FortiAnalyzer都是美国飞塔（Fortinet）公司的产品。Fortinet FortiManager是一套集中式网络安全管理解决方案。FortiAnalyzer是一套集中式网络安全报告解决方案。 Fortinet FortiManager 6.0.0及之前版本和FortiAnalyzer 6.0.0及之前版本中存在开放重定向漏洞。攻击者可通过实施社会工程攻击利用该漏洞注入脚本代码。

N/A

N/A