Fortinet FortiClient backend link vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exists in Fortinet FortiClient...

Fortinet FortiClient Incorrect Permission Assignment Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Fortinet FortiClient on Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

CVE-2021-22130

A stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1, 1.2.0 to 1.2.9, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 may allow an authenticated, remote attacker to perform a Denial of Service attack by running the diagnose sys cpuset with a large cpuset mask value...

Stack overflow

A stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1, 1.2.0 to 1.2.9, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 may allow an authenticated, remote attacker to perform a Denial of Service attack by running the diagnose sys cpuset with a large cpuset mask value...

CVE-2021-22130

A stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1, 1.2.0 to 1.2.9, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 may allow an authenticated, remote attacker to perform a Denial of Service attack by running the diagnose sys cpuset with a large cpuset mask value...

Fortinet FortiWLC Access Control Vulnerability

The Fortinet FortiWLC is a wireless LAN controller from Fortinet, Inc. An access control error vulnerability exists in Fortinet FortiWLC, which stems from improperly restricted access. The following products and versions are affected: FortiWLC: 8.5.0, 8.5.1, 8.5.2, 8.5.3, 8.6.0...

Fortinet Fortigate xss (FG-IR-20-199)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-20-199 advisory. - Failure to sanitize input in the SSL VPN web portal of FortiOS 5.2.10 through 5.2.15, 5.4.0 through 5.4.13, 5.6.0 through...

Authorization

Two authorization bypass through user-controlled key vulnerabilities in the Fortinet FortiPresence 2.1.0 administration interface may allow an attacker to gain access to some user data via portal manager or portal users parameters...

CVE-2020-6641

CVE-2020-6641 concerns two authorization bypass vulnerabilities in the Fortinet FortiPresence 2.1.0 administration interface, caused by user-controlled key parameters. An attacker could gain access to some user data via portal manager or portal users parameters. Documented impact is partial confi...

CVE-2020-6641

Two authorization bypass through user-controlled key vulnerabilities in the Fortinet FortiPresence 2.1.0 administration interface may allow an attacker to gain access to some user data via portal manager or portal users parameters...

PT-2021-12498

Name of the Vulnerable Software and Affected Versions: Fortinet FortiPresence version 2.1.0 Description: The issue concerns authorization bypass vulnerabilities in the administration interface, potentially allowing attackers to access user data. This can be achieved through user-controlled key...

CVE-2020-6641: Authorization Bypass Through User-Controlled Key

Two authorization bypass through user-controlled key vulnerabilities in the Fortinet FortiPresence 2.1.0 administration interface may allow an attacker to gain access to some user data via portal manager or portal users parameters...

Fortinet FortiWLC cross-site scripting vulnerability

Fortinet FortiWLC is a wireless LAN controller from Fortinet. A cross-site scripting vulnerability exists in Fortinet FortiWLC, which could be exploited by remote attackers to perform cross-site scripting XSS attacks. The affected products and versions are as follows:FortiWLC: 8.5.0, 8.5.1, 8.5.2...

FortiProxy - Stack-based Buffer overflow vulnerability through the diagnose sys cpuset CLI command

A stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI may allow an authenticated, remote attacker to perform a Denial of Service attack by running the diagnose sys cpuset with a large cpuset mask value. Fortinet is not aware of any successful exploitation of this...

Fortinet FortiWeb operating system command injection vulnerability

FortiWeb is a Web Application Firewall WAF that protects hosted web applications from attacks targeting known and unknown vulnerabilities. An OS command injection vulnerability exists in the management interface of FortiWeb. A remote authenticated attacker could exploit this vulnerability to...

Fortinet FortiSwitch resource management error vulnerability

Fortinet FortiSwitch is a switch product of American Fiat Fortinet, its biggest advantage is that it can be unified by the firewall management, in a window you can use the graphical interface to manage the entire local area network. A resource management error vulnerability exists in FortiSwitch...

Fortinet FortiGate cross-site scripting vulnerability

Fortinet FortiGate is a network security platform from Fortinet, Inc. The platform provides firewall, anti-virus and intrusion prevention IPS, application control, anti-spam, wireless controller, and WAN acceleration capabilities.A cross-site scripting vulnerability exists in Fortinet FortiGate...

Fortinet FortiAuthenticator WEB UI Trust Management Vulnerability

The Fortinet FortiAuthenticator WEB UI is the web interface for a centralized user identity management solution from Fortinet, Inc. A security vulnerability exists in FortiAuthenticator that arises from the use of hard-coded keys to encrypt configuration files, debug logs, and password data. The...

FBI Update on Exploitation of Fortinet FortiOS Vulnerabilities

The Federal Bureau of Investigation FBI has released an FBI FLASH, APT Actors Exploiting Fortinet Vulnerabilities to Gain Access for Malicious Activity, which describes advanced persistent threat APT actors exploiting known Fortinet FortiOS vulnerabilities. APT actors may exploit these...

Fortinet FortiWLC Access Control Vulnerability

The Fortinet FortiWLC is a wireless LAN controller from Fortinet, Inc. An access control error vulnerability exists in the Fortinet FortiWLC that stems from the presence of hard-coded credentials in the application code...