CVE-2019-5594

An Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin webUI may allow an unauthenticated attacker to perform a reflected XSS attack via the search field in the webUI...

CVE-2019-5594

The CVE-2019-5594 entry describes a reflected XSS in Fortinet FortiNAC admin webUI, exploitable without authentication via the search field. Affected versions are FortiNAC 8.3.0–8.3.6 and 8.5.0. The vulnerability arises from improper input neutralization during web page generation. Multiple conne...

CVE-2019-6695

Lack of root file system integrity checking in Fortinet FortiManager VM application images of 6.2.0, 6.0.6 and below may allow an attacker to implant third-party programs by recreating the image through specific methods...

CVE-2019-6695

CVE-2019-6695 affects Fortinet FortiManager VM image packages (versions 6.2.0, 6.0.6 and below). The root cause is lack of root file system integrity checking, which could let an attacker recreate the VM image and implant third‑party programs before boot. Documented impact is image-level tamperin...

Fortinet FortiManager VM Input Validation Error Vulnerability

Fortinet FortiManager VM is a centralized network security management platform for virtual machines from Fortinet. The platform can group devices into different management domains ADOM for security deployment and management. An input validation error vulnerability exists in Fortinet FortiManager ...

FortiOS 5.6.7 / 6.0.4 Credential Disclosure

Exploit Title: FortiOS Leak file - Reading login/passwords in clear text. Google Dork: intext:"Please Login" inurl:"/remote/login" Date: 17/08/2019 Exploit Author: Carlos E. Vieira Vendor Homepage: https://www.fortinet.com/ Software Link: https://www.fortinet.com/products/fortigate/fortios.html...

FortiOS 5.6.3 - 5.6.7 FortiOS 6.0.0 - 6.0.4 - Credentials Disclosure

FortiOS 5.6.3 - 5.6.7 FortiOS 6.0.0 - 6.0.4 - Credentials Disclosure Exploit Title: FortiOS Leak file - Reading login/passwords in clear text. Google Dork: intext:"Please Login" inurl:"/remote/login" Date: 17/08/2019 Exploit Author: Carlos E. Vieira Vendor Homepage: https://www.fortinet.com/...

Fortinet FortiOS 5.6.3 - 5.6.7 / FortiOS 6.0.0 - 6.0.4 - Credentials Disclosure (Metasploit)

Exploit Title: Fortinet FortiOS Leak file - Reading login/passwords in clear text. Google Dork: intext:"Please Login" inurl:"/remote/login" Date: 17/08/2019 Exploit Author: Carlos E. Vieira Vendor Homepage: https://www.fortinet.com/ Software Link:...

Fortinet FortiOS Information Disclosure Vulnerability (CNVD-2019-27254)

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. An information disclosure...

WordPress Give plugin <= 2.5.0 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability found by Tin Duong Fortinet FortiGuard Labs in WordPress Give plugin version = 2.5.0. Solution Update the WordPress Give plugin to the latest available version at least 2.5.1...

Fortinet FortiGate < 6.2.1 Information Disclosure (FG-IR-19-037)

The remote host is running a FortiOS version prior to 6.2.1. It is, therefore, affected by an information disclosure vulnerability. An unauthenticated attacker on the same subnet may be able to intercept sensitive information by impersonating the configured LDAP server. C Tenable Network Security...

Several pre-auth vulnerability in enterprise SSL VPN

Critical vulnerabilities in enterprise virtual private network VPN solutions from Palo Alto Networks, Fortinet and Pulse Secure allow attackers to infiltrate corporate networks, obtain sensitive information, and eavesdrop on communications, researchers warn SonicWall products are not vulnerable t...

Fortinet FortiRecorder 2.7.3 Hardcoded Password Vulnerability

Fortinet FortiRecorder 2.7.3 Hardcoded Password Vulnerability Original posting: https://xor.cat/2019/08/05/fortinet-fortirecorder-hardcoded-password/ Text archive available here: https://xor.cat/archive/2019/08/05/fortinet-fortirecorder-hardcoded-password.txt Background In June of 2019 I discover...

Fortinet FortiRecorder 2.7.3 Hardcoded Password

Original posting: https://xor.cat/2019/08/05/fortinet-fortirecorder-hardcoded-password/ Text archive available here: https://xor.cat/archive/2019/08/05/fortinet-fortirecorder-hardcoded-password.txt Background In June of 2019 I discovered a vulnerability in Fortinet's FortiRecorder1 product which...

WordPress Popup Builder plugin <= 3.44 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability found by Tin Duong Fortinet FortiGuard Labs in WordPress Popup Builder plugin versions = 3.44. Solution Update the WordPress Popup Builder plugin to the latest available version at least 3.45...

PT-2019-4120

Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description A default configuration issue in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server. The issue relates to...

Protect

Multiple Fortinet products may be affected by the following Linux Kernel vulnerability:...

PT-2019-3398

Name of the Vulnerable Software and Affected Versions Fortinet FortiNAC versions 8.3.0 through 8.3.6 Fortinet FortiNAC version 8.5.0 Description The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, in the admin webUI of Fortin...

Fortinet FCM-MB40 Remote Command Execution

A remote command execution vulnerability exists in Fortinet FCM-MB40. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Fortinet FCM-MB40 - Cross-Site Request Forgery / Remote Command Execution Exploit

Exploit for hardware platform in category web applications Exploit Title: FCM-MB40 Remote Command Execution as Root via CSRF Date: 2019-06-19 Exploit Author: @XORcat Vendor Homepage: https://fortinet.com/ Software Link: Customer Account Required Version: v1.2.0.0 Tested on: Linux CVE : TBA !--...