Fortinet FortiWeb Buffer Overflow Vulnerability (CNVD-2021-70111)

Fortinet FortiWeb is a Web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures Web applications and protects sensitive database content. fortiWeb suffers from a buffer overflow vulnerability. The vulnerability stems from the existence of multiple stack-based buffer overflow vulnerabilities in the FortiWeb CLI interface. This could allow an authenticated attacker to execute unauthorized code or commands via the config backup parameter. No detailed vulnerability details are available at this time.