Lucene search

K
fortinetFortiGuard LabsFG-IR-22-152
HistorySep 06, 2022 - 12:00 a.m.

FortiSOAR - Privilege escalation from nginx user to root

2022-09-0600:00:00
FortiGuard Labs
www.fortiguard.com
12
fortisoar
privilege escalation
nginx
cwe-269
vulnerability
gui user
python commands
root
system files
software

EPSS

0

Percentile

12.6%

An improper privilege management vulnerability [CWE-269] in FortiSOAR may allow a GUI user who has already found a way to modify system files (via another, unrelated and hypothetical exploit) to execute arbitrary Python commands as root.

EPSS

0

Percentile

12.6%

Related for FG-IR-22-152