ID
VAR-202101-0504
CVE
CVE-2020-29019
TITLE
FortiWeb Out-of-bounds Vulnerability in Microsoft
Trust: 0.8
DESCRIPTION
A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow a remote, unauthenticated attacker to crash the httpd daemon thread by sending a request with a crafted cookie header. FortiWeb Is vulnerable to an out-of-bounds write.Denial of service (DoS) It may be put into a state. Fortinet FortiWeb is a web application layer firewall developed by Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning, etc., to ensure the security of web applications and protect sensitive database content. Fortinet FortiWeb has a security vulnerability that could allow a remote attacker to perform a denial of service (DoS) attack. The following products and versions are affected: Fortinet FortiWeb: 6.2.0, 6.2.1, 6.2.2, 6.2.3, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7
Trust: 1.8
AFFECTED PRODUCTS
| vendor: | fortinet | model: | fortiweb | scope: | lt | version: | 6.2.4 | Trust: 1.0 |
| vendor: | fortinet | model: | fortiweb | scope: | lte | version: | 6.3.7 | Trust: 1.0 |
| vendor: | fortinet | model: | fortiweb | scope: | gte | version: | 6.3.0 | Trust: 1.0 |
| vendor: | フォーティネット | model: | fortiweb | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | フォーティネット | model: | fortiweb | scope: | eq | version: | 6.2.4 | Trust: 0.8 |
| vendor: | フォーティネット | model: | fortiweb | scope: | eq | version: | 6.3.0 to 6.3.7 | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-787 | Trust: 1.1 |
| problemtype: | Out-of-bounds writing (CWE-787) [NVD Evaluation ] | Trust: 0.8 |
PATCH
| title: | FG-IR-20-126 | url: | https://www.fortiguard.com/psirt/FG-IR-20-126 | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2020-29019 | Trust: 2.0 |
| db: | JVNDB | id: | JVNDB-2020-015418 | Trust: 0.8 |
| db: | VULHUB | id: | VHN-375146 | Trust: 0.1 |
| db: | VULMON | id: | CVE-2020-29019 | Trust: 0.1 |
REFERENCES
| url: | https://www.fortiguard.com/psirt/fg-ir-20-126 | Trust: 1.2 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2020-29019 | Trust: 0.8 |
| url: | https://cwe.mitre.org/data/definitions/787.html | Trust: 0.1 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
| url: | https://www.fortiguard.com/psirt/%20fg-ir-20-126 | Trust: 0.1 |
SOURCES
| db: | VULHUB | id: | VHN-375146 |
| db: | VULMON | id: | CVE-2020-29019 |
| db: | JVNDB | id: | JVNDB-2020-015418 |
| db: | NVD | id: | CVE-2020-29019 |
LAST UPDATE DATE
2024-08-14T14:44:35.057000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-375146 | date: | 2021-01-20T00:00:00 |
| db: | VULMON | id: | CVE-2020-29019 | date: | 2021-01-20T00:00:00 |
| db: | JVNDB | id: | JVNDB-2020-015418 | date: | 2021-09-22T06:11:00 |
| db: | NVD | id: | CVE-2020-29019 | date: | 2021-01-20T20:45:37.003 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-375146 | date: | 2021-01-14T00:00:00 |
| db: | VULMON | id: | CVE-2020-29019 | date: | 2021-01-14T00:00:00 |
| db: | JVNDB | id: | JVNDB-2020-015418 | date: | 2021-09-22T00:00:00 |
| db: | NVD | id: | CVE-2020-29019 | date: | 2021-01-14T16:15:18.180 |