6556 matches found
Hackers Exploit Unpatched VPNs to Install Ransomware on Industrial Targets
Unpatched Fortinet VPN devices are being targeted in a series of attacks against industrial enterprises in Europe to deploy a new strain of ransomware called "Cring" inside corporate networks. At least one of the hacking incidents led to the temporary shutdown of a production site, said...
Hackers Exploit Unpatched VPNs to Install Ransomware on Industrial Targets
Unpatched Fortinet VPN devices are being targeted in a series of attacks against industrial enterprises in Europe to deploy a new strain of ransomware called "Cring" inside corporate networks. At least one of the hacking incidents led to the temporary shutdown of a production site, said...
Fortinet FortiADC log information leakage vulnerability
Fortinet FortiADC is an application delivery controller from Fortinet, Inc. A security vulnerability exists in FortiADCManager that originates from the insertion of a user's password into a log file in clear text. An attacker could exploit this vulnerability to obtain sensitive information...
Fortinet FortiWeb information leakage vulnerability
American Fita Fortinet was founded in October 2000, is committed to chip design, network communication speed, security and defense. A security vulnerability exists in Fortinet fortiweb, which can be exploited by an attacker to read the password used by the FortiWeb scanner to access devices defin...
Hackers exploiting critical vulnerabilities in Fortinet VPN – FBI-CISA
By Deeba Ahmed According to CISA and the FBI, advanced persistent threat APT nation-state actors are exploiting known vulnerabilities in the Fortinet FortiOS. This is a post from HackRead.com Read the original post: Hackers exploiting critical vulnerabilities in Fortinet VPN - FBI-CISA...
FBI: APTs Actively Exploiting Fortinet VPN Bugs
The FBI and the Cybersecurity and Infrastructure Security Agency are warning that advanced persistent threat APT nation-state actors are actively exploiting known security vulnerabilities in the Fortinet FortiOS cybersecurity operating system, affecting the company’s SSL VPN products. According t...
FBI-CISA Joint Advisory on Exploitation of Fortinet FortiOS Vulnerabilities
The Federal Bureau of Investigation FBI and CISA have released a Joint Cybersecurity Advisory CSA to warn users and administrators of the likelihood that advanced persistent threat APT actors are actively exploiting known Fortinet FortiOS vulnerabilities CVE-2018-13379, CVE-2020-12812, and...
WordPress Newsletter plugin <= 6.5.3 - CSV Injection vulnerability
CSV Injection vulnerability discovered by Fortinet in WordPress Newsletter plugin versions = 6.5.3. Solution Update the WordPress Newsletter to the latest available version at least 6.5.4...
Fortinet FortiOS <= 6.2.5 / 6.4 <= 6.4.2 Traffic Bypass (FG-IR-20-172)
The remote host is running a version of FortiOS prior or equal to 6.2.5, or 6.4 prior to 6.4.3. It is, therefore, affected by a traffic bypass vulnerability. When traffic other than HTTP/S eg: SSH traffic, etc... traverses the FortiGate in version below 6.2.5 and below 6.4.2 on port 80/443, it is...
Fortinet FortiClient Temporary File Privilege Escalation
The vulnerability of the Fortinet FortiClient for Windows security tool is related to the unsafe use of temporary files. Exploiting this vulnerability can allow attackers to increase their privileges...
Fortinet FortiClient Unauthenticated Access
The vulnerability of the Fortinet FortiClient for Windows security tool is related to the rigid encoding of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the protected information...
Gitlab CE/EE Trust Management Issue Vulnerability
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A trust management issue vulnerability exists in Gitlab...
CVE-2021-22189
Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the certificates for the Fortinet OTP that could result in authentication issues...
CVE-2021-22189
Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the certificates for the Fortinet OTP that could result in authentication issues...
CVE-2021-22189
Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the certificates for the Fortinet OTP that could result in authentication issues...
Authentication flaw
Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the certificates for the Fortinet OTP that could result in authentication issues...
CVE-2021-22189
Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the certificates for the Fortinet OTP that could result in authentication issues...
UBUNTU-CVE-2021-22189
Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the certificates for the Fortinet OTP that could result in authentication issues...
CVE-2021-22189
Technical details about CVE-2021-22189 are not publicly provided in the connected documents. Please monitor for updates from vendors and security advisories for affected GitLab CE/EE versions and remediation guidance.
