Details of VAR-201608-0287

ID

VAR-201608-0287

CVE

CVE-2016-3196

TITLE

Fortinet FortiAnalyzer and FortiManager Vulnerable to cross-site scripting

Trust: 0.8

sources: JVNDB: JVNDB-2016-004160

DESCRIPTION

Cross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an image uploaded in the report section. Multiple Fortinet Products are prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. Both Fortinet FortiAnalyzer and FortiManager are products of Fortinet. The former is a centralized network security reporting solution, and the latter is a centralized network security management solution. A cross-site scripting vulnerability exists in Fortinet FortiAnalyzer 5.x prior to 5.2.6 and FortiManager 5.x prior to 5.2.6

Trust: 1.98

sources: NVD: CVE-2016-3196 // JVNDB: JVNDB-2016-004160 // BID: 92203 // VULHUB: VHN-92015

AFFECTED PRODUCTS

vendor:	fortinet	model:	fortianalyzer	scope:	eq	version:	5.0.1	Trust: 1.6
vendor:	fortinet	model:	fortianalyzer	scope:	eq	version:	5.2.5	Trust: 1.6
vendor:	fortinet	model:	fortianalyzer	scope:	eq	version:	5.2.4	Trust: 1.6
vendor:	fortinet	model:	fortianalyzer	scope:	eq	version:	5.0.10	Trust: 1.6
vendor:	fortinet	model:	fortianalyzer	scope:	eq	version:	5.2.0	Trust: 1.6
vendor:	fortinet	model:	fortianalyzer	scope:	eq	version:	5.0.4	Trust: 1.6
vendor:	fortinet	model:	fortianalyzer	scope:	eq	version:	5.2.1	Trust: 1.6
vendor:	fortinet	model:	fortianalyzer	scope:	eq	version:	5.0.5	Trust: 1.6
vendor:	fortinet	model:	fortianalyzer	scope:	eq	version:	5.2.3	Trust: 1.6
vendor:	fortinet	model:	fortianalyzer	scope:	eq	version:	5.0.0	Trust: 1.6
vendor:	fortinet	model:	fortimanager	scope:	eq	version:	5.0.8	Trust: 1.0
vendor:	fortinet	model:	fortimanager	scope:	eq	version:	5.0.3	Trust: 1.0
vendor:	fortinet	model:	fortimanager	scope:	eq	version:	5.0.10	Trust: 1.0
vendor:	fortinet	model:	fortimanager	scope:	eq	version:	5.0.7	Trust: 1.0
vendor:	fortinet	model:	fortimanager	scope:	eq	version:	5.0.5	Trust: 1.0
vendor:	fortinet	model:	fortimanager	scope:	eq	version:	5.0.9	Trust: 1.0
vendor:	fortinet	model:	fortimanager	scope:	eq	version:	5.0.6	Trust: 1.0
vendor:	fortinet	model:	fortimanager	scope:	eq	version:	5.2.3	Trust: 1.0
vendor:	fortinet	model:	fortimanager	scope:	eq	version:	5.2.2	Trust: 1.0
vendor:	fortinet	model:	fortianalyzer	scope:	eq	version:	5.2.2	Trust: 1.0
vendor:	fortinet	model:	fortimanager	scope:	eq	version:	5.2.0	Trust: 1.0
vendor:	fortinet	model:	fortimanager	scope:	eq	version:	5.0.4	Trust: 1.0
vendor:	fortinet	model:	fortimanager	scope:	eq	version:	5.2.1	Trust: 1.0
vendor:	fortinet	model:	fortimanager	scope:	eq	version:	5.2.4	Trust: 1.0
vendor:	fortinet	model:	fortimanager	scope:	eq	version:	5.2.5	Trust: 1.0
vendor:	fortinet	model:	fortianalyzer	scope:	eq	version:	5.2.6	Trust: 0.8
vendor:	fortinet	model:	fortimanager	scope:	eq	version:	5.2.6	Trust: 0.8
vendor:	fortinet	model:	fortianalyzer	scope:	lt	version:	5.x	Trust: 0.8
vendor:	fortinet	model:	fortimanager	scope:	lt	version:	5.x	Trust: 0.8
vendor:	fortinet	model:	fortimom-vm	scope:	eq	version:	0	Trust: 0.3
vendor:	fortinet	model:	fortimanager virtual appliances	scope:	eq	version:	0	Trust: 0.3
vendor:	fortinet	model:	fortimanager 400c	scope:	-	version:	-	Trust: 0.3
vendor:	fortinet	model:	fortimanager 400b	scope:	-	version:	-	Trust: 0.3
vendor:	fortinet	model:	fortimanager 400a	scope:	-	version:	-	Trust: 0.3
vendor:	fortinet	model:	fortimanager 4000e	scope:	-	version:	-	Trust: 0.3
vendor:	fortinet	model:	fortimanager 4000d	scope:	-	version:	-	Trust: 0.3
vendor:	fortinet	model:	fortimanager 3900e	scope:	-	version:	-	Trust: 0.3
vendor:	fortinet	model:	fortimanager 300d	scope:	-	version:	-	Trust: 0.3
vendor:	fortinet	model:	fortimanager 3000c	scope:	-	version:	-	Trust: 0.3
vendor:	fortinet	model:	fortimanager 200d	scope:	-	version:	-	Trust: 0.3
vendor:	fortinet	model:	fortimanager 1000d	scope:	-	version:	-	Trust: 0.3
vendor:	fortinet	model:	fortimanager 1000c	scope:	-	version:	-	Trust: 0.3
vendor:	fortinet	model:	fortimanager	scope:	eq	version:	100	Trust: 0.3
vendor:	fortinet	model:	fortianalyzer vm gb500	scope:	eq	version:	0	Trust: 0.3
vendor:	fortinet	model:	fortianalyzer vm gb5	scope:	eq	version:	0	Trust: 0.3
vendor:	fortinet	model:	fortianalyzer vm gb25	scope:	eq	version:	0	Trust: 0.3
vendor:	fortinet	model:	fortianalyzer vm gb2000	scope:	eq	version:	0	Trust: 0.3
vendor:	fortinet	model:	fortianalyzer vm gb100	scope:	eq	version:	0	Trust: 0.3
vendor:	fortinet	model:	fortianalyzer vm gb1	scope:	eq	version:	0	Trust: 0.3
vendor:	fortinet	model:	fortianalyzer vm base	scope:	eq	version:	0	Trust: 0.3
vendor:	fortinet	model:	fortianalyzer 3900e	scope:	-	version:	-	Trust: 0.3
vendor:	fortinet	model:	fortianalyzer 3500e	scope:	-	version:	-	Trust: 0.3
vendor:	fortinet	model:	fortianalyzer 300d	scope:	-	version:	-	Trust: 0.3
vendor:	fortinet	model:	fortianalyzer 3000e	scope:	-	version:	-	Trust: 0.3
vendor:	fortinet	model:	fortianalyzer 200d	scope:	-	version:	-	Trust: 0.3
vendor:	fortinet	model:	fortianalyzer 2000b	scope:	-	version:	-	Trust: 0.3
vendor:	fortinet	model:	fortianalyzer 1000d	scope:	-	version:	-	Trust: 0.3

sources: BID: 92203 // JVNDB: JVNDB-2016-004160 // CNNVD: CNNVD-201608-095 // NVD: CVE-2016-3196

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2016-3196
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2016-3196
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201608-095
value:	LOW
Trust: 0.6
VULHUB:	VHN-92015
value:	LOW
Trust: 0.1

nvd@nist.gov:	CVE-2016-3196
severity:	LOW
baseScore:	3.5
vectorString:	AV:N/AC:M/AU:S/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	SINGLE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	6.8
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-92015
severity:	LOW
baseScore:	3.5
vectorString:	AV:N/AC:M/AU:S/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	SINGLE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	6.8
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2016-3196
baseSeverity:	MEDIUM
baseScore:	5.4
vectorString:	CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	REQUIRED
scope:	CHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	2.3
impactScore:	2.7
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-92015 // JVNDB: JVNDB-2016-004160 // CNNVD: CNNVD-201608-095 // NVD: CVE-2016-3196

PROBLEMTYPE DATA

problemtype:

CWE-79

Trust: 1.9

sources: VULHUB: VHN-92015 // JVNDB: JVNDB-2016-004160 // NVD: CVE-2016-3196

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201608-095

TYPE

XSS

Trust: 0.6

sources: CNNVD: CNNVD-201608-095

CONFIGURATIONS

sources: JVNDB: JVNDB-2016-004160

PATCH

title:	FortiManager and FortiAnalyzer Persistent XSS vulnerability	url:	http://fortiguard.com/advisory/fortimanager-and-fortianalyzer-persistent-xss-vulnerability	Trust: 0.8
title:	Fortinet FortiAnalyzer and FortiManager Fixes for cross-site scripting vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=63487	Trust: 0.6

sources: JVNDB: JVNDB-2016-004160 // CNNVD: CNNVD-201608-095

EXTERNAL IDS

db:	NVD	id:	CVE-2016-3196	Trust: 2.5
db:	BID	id:	92203	Trust: 1.4
db:	SECTRACK	id:	1036550	Trust: 1.1
db:	SECTRACK	id:	1036551	Trust: 1.1
db:	JVNDB	id:	JVNDB-2016-004160	Trust: 0.8
db:	CNNVD	id:	CNNVD-201608-095	Trust: 0.6
db:	VULHUB	id:	VHN-92015	Trust: 0.1

sources: VULHUB: VHN-92015 // BID: 92203 // JVNDB: JVNDB-2016-004160 // CNNVD: CNNVD-201608-095 // NVD: CVE-2016-3196

REFERENCES

url:	http://fortiguard.com/advisory/fortimanager-and-fortianalyzer-persistent-xss-vulnerability	Trust: 1.7
url:	http://seclists.org/fulldisclosure/2016/aug/4	Trust: 1.4
url:	http://www.securityfocus.com/bid/92203	Trust: 1.1
url:	http://www.securityfocus.com/archive/1/539069/100/0/threaded	Trust: 1.1
url:	http://www.vulnerability-lab.com/get_content.php?id=1687	Trust: 1.1
url:	http://www.securitytracker.com/id/1036550	Trust: 1.1
url:	http://www.securitytracker.com/id/1036551	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-3196	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-3196	Trust: 0.8
url:	http://www.fortinet.com/	Trust: 0.3

sources: VULHUB: VHN-92015 // BID: 92203 // JVNDB: JVNDB-2016-004160 // CNNVD: CNNVD-201608-095 // NVD: CVE-2016-3196

CREDITS

Marco Onorati

Trust: 0.3

sources: BID: 92203

SOURCES

db:	VULHUB	id:	VHN-92015
db:	BID	id:	92203
db:	JVNDB	id:	JVNDB-2016-004160
db:	CNNVD	id:	CNNVD-201608-095
db:	NVD	id:	CVE-2016-3196

LAST UPDATE DATE

2024-08-14T14:57:52.786000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-92015	date:	2018-10-09T00:00:00
db:	BID	id:	92203	date:	2016-08-01T00:00:00
db:	JVNDB	id:	JVNDB-2016-004160	date:	2016-08-09T00:00:00
db:	CNNVD	id:	CNNVD-201608-095	date:	2016-08-09T00:00:00
db:	NVD	id:	CVE-2016-3196	date:	2018-10-09T19:59:48.130

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-92015	date:	2016-08-05T00:00:00
db:	BID	id:	92203	date:	2016-08-01T00:00:00
db:	JVNDB	id:	JVNDB-2016-004160	date:	2016-08-09T00:00:00
db:	CNNVD	id:	CNNVD-201608-095	date:	2016-08-09T00:00:00
db:	NVD	id:	CVE-2016-3196	date:	2016-08-05T14:59:06.547