3 ms·
Missing authentication in fgfmd daemon allows remote execution of arbitrary code
- ColinWright 2y agoMore complete summary: A missing authentication for critical function vulnerability [CWE-306] in FortiManager fgfmd daemon may allow a remote unauthenticated attacker to execute arbitrary code or commands via specially crafted requests. Reports have shown this vulnerability to be exploited in the wild. A friend of mine who works in the area of providing computer networking hardware says: "At work, people are running up and down saying 'Waily waily'"