117 matches found
CVE-2021-41020
An improper access control vulnerability CWE-284 in FortiIsolator versions 2.3.2 and below may allow an authenticated, non privileged attacker to regenerate the CA certificate via the regeneration URL...
CVE-2024-33507
An insufficient session expiration vulnerability CWE-613 and an incorrect authorization vulnerability CWE-863 in FortiIsolator 2.4.0 through 2.4.4, 2.3 all versions, 2.2.0, 2.1 all versions, 2.0 all versions authentication mechanism may allow remote unauthenticated attacker to deauthenticate logg...
EUVD-2024-31245
An insufficient session expiration vulnerability CWE-613 and an incorrect authorization vulnerability CWE-863 in FortiIsolator 2.4.0 through 2.4.4, 2.3 all versions, 2.2.0, 2.1 all versions, 2.0 all versions authentication mechanism may allow remote unauthenticated attacker to deauthenticate logg...
CVE-2024-33507
An insufficient session expiration vulnerability CWE-613 and an incorrect authorization vulnerability CWE-863 in FortiIsolator 2.4.0 through 2.4.4, 2.3 all versions, 2.2.0, 2.1 all versions, 2.0 all versions authentication mechanism may allow remote unauthenticated attacker to deauthenticate logg...
CVE-2024-33507
An insufficient session expiration vulnerability CWE-613 and an incorrect authorization vulnerability CWE-863 in FortiIsolator 2.4.0 through 2.4.4, 2.3 all versions, 2.2.0, 2.1 all versions, 2.0 all versions authentication mechanism may allow remote unauthenticated attacker to deauthenticate logg...
CVE-2024-33507
An insufficient session expiration vulnerability CWE-613 and an incorrect authorization vulnerability CWE-863 in FortiIsolator 2.4.0 through 2.4.4, 2.3 all versions, 2.2.0, 2.1 all versions, 2.0 all versions authentication mechanism may allow remote unauthenticated attacker to deauthenticate logg...
CVE-2024-33507
CVE-2024-33507 affects FortiIsolator: multiple releases are vulnerable due to an insufficient session expiration (CWE-613) and an incorrect authorization flaw (CWE-863). A remote unauthenticated attacker can deauthenticate logged-in administrators by sending a crafted cookie, and a remote authent...
CVE-2024-33507
An insufficient session expiration vulnerability CWE-613 and an incorrect authorization vulnerability CWE-863 in FortiIsolator 2.4.0 through 2.4.4, 2.3 all versions, 2.2.0, 2.1 all versions, 2.0 all versions authentication mechanism may allow remote unauthenticated attacker to deauthenticate logg...
Fortinet FortiIsolator 代码问题漏洞
Fortinet FortiIsolator is a Fortinet application that provides remote security isolation capabilities for browsers. The application adds additional advanced threat protection capabilities to the Fortinet Security Fabric and protects critical business data from sophisticated threats on the Web...
CVE-2024-33507: Insufficient Session Expiration
An insufficient session expiration vulnerability CWE-613 and an incorrect authorization vulnerability CWE-863 in FortiIsolator 2.4.0 through 2.4.4, 2.3 all versions, 2.2.0, 2.1 all versions, 2.0 all versions authentication mechanism may allow remote unauthenticated attacker to deauthenticate logg...
EUVD-2020-27796
Malware in sbrugna...
EUVD-2020-27790
Malware in sbrugna...
EUVD-2025-10304
Malicious code in bioql PyPI...
EUVD-2024-54265
Malicious code in bioql PyPI...
EUVD-2021-28173
Malicious code in bioql PyPI...
EUVD-2022-27444
Malicious code in bioql PyPI...
EUVD-2025-10308
Malicious code in bioql PyPI...
EUVD-2024-24972
Malicious code in bioql PyPI...
EUVD-2024-29945
Malicious code in bioql PyPI...
The vulnerability of the graphical user interface of the FortiIsolator browser platform, related to the failure to implement measures to neutralize specific elements, allows a perpetrator to execute arbitrary commands.
The vulnerability of the graphical user interface of the FortiIsolator browser platform relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands...