CVE:CVE-2017-3126
CNNVD:CNNVD-201705-1287
Fortinet FortiAnalyzer 5.4.0版本至5.4.2版本和FortiManager 5.4.0版本至5.4.2版本中存在开放重定向漏洞。攻击者可借助‘next’参数利用该漏洞执行未授权的代码或命令。
solution:Upgrade fortinet fortianalyzer_firmware to a higher version than 5.4.0,5.4.1,5.4.2,and avoid the version 5.4.0,5.4.1,5.4.2; Upgrade fortinet fortimanager_firmware to a higher version than 5.4.0,5.4.1,5.4.2,and avoid the version 5.4.0,5.4.1,5.4.2