6439 matches found
Fortinet FortiMail Detection (SSH Login)
SSH login-based detection of Fortinet FortiMail. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2015-3369 · Fortinet · Fortios
Name of the Vulnerable Software and Affected Versions: FortiOS version 5.0 Patch 7 build 4457 Description: The CAPWAP DTLS protocol implementation in FortiOS uses the same certificate and private key across different customers' installations. However, according to FG-IR-15-002, the Fortinet Facto...
CVE-2015-1569: Undefined Security Weakness
Fortinet FortiClient 5.2.028 for iOS does not validate certificates, which makes it easier for man-in-the-middle attackers to spoof SSL VPN servers via a crafted certificate...
Fortinet FortiAnalyzer Detection (SSH Login)
SSH login-based detection of Fortinet FortiAnalyzer. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fortinet FortiWeb Detection (SSH Login)
SSH login-based detection of Fortinet FortiWeb. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fortinet FortiAuthenticator Cross-Site Scripting Vulnerability
Fortinet FortiAuthenticator is a series of secure authentication solutions that identify and interface with FortiToken™ two-factor authentication tokens for secure remote access. A cross-site scripting vulnerability in Fortinet FortiAuthenticator 3.0.0 could allow a remote attacker to inject...
Fortinet FortiAuthenticator Directory Traversal Vulnerability
Fortinet FortiAuthenticator is a series of secure authentication solutions that identify and interface with FortiToken™ two-factor authentication tokens for secure remote access. A directory traversal vulnerability in Fortinet FortiAuthenticator 3.0.0 allows a local user to read arbitrary files v...
FortiAuthenticator multiple vulnerabilities
...
FortiOS CAPWAP server two vulnerabilities
...
Fortinet FortiOS Information Disclosure Vulnerability (CNVD-2015-00916)
Fortinet FortiOS is a set of security operating system developed by the U.S. company Fita Fortinet dedicated to the FortiGate platform, which provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering, anti-spam and other security features. An information disclosure vulnerabili...
Fortinet FortiOS HTML Injection Vulnerability
Fortinet FortiOS is a set of security operating system developed by the U.S. company Fita Fortinet dedicated to the FortiGate platform, which provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering, anti-spam and other security features. An HTML injection vulnerability exist...
KLA10494 Multiple vulnerabilities in Fortinet FortiAuthenticator
Multiple serious vulnerabilities have been found in Fortinet FortiAuthenticator. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, inject code and read arbitrary files. Below is a complete list of vulnerabilities 1. XSS vulnerability can be...
CVE-2015-1456
Fortinet FortiAuthenticator 3.0.0 logs the PostgreSQL usernames and passwords in cleartext, which allows remote administrators to obtain sensitive information by reading the log at debug/startup/...
CVE-2015-1455
Fortinet FortiAuthenticator 3.0.0 has a password of 1 slony for the slony PostgreSQL user and 2 www-data for the www-data PostgreSQL user, which makes it easier for remote attackers to obtain access via unspecified vectors...
Design/Logic Flaw
Fortinet FortiAuthenticator 3.0.0 has a password of 1 slony for the slony PostgreSQL user and 2 www-data for the www-data PostgreSQL user, which makes it easier for remote attackers to obtain access via unspecified vectors...
Command injection
Fortinet FortiAuthenticator 3.0.0 allows local users to bypass intended restrictions and gain privileges by creating /tmp/privexec/dbgcoreenableshellaccess and executing the "shell" command...
Cross site scripting
Cross-site scripting XSS vulnerability in Fortinet FortiAuthenticator 3.0.0 allows remote attackers to inject arbitrary web script or HTML via the operation parameter to cert/scep/...
Command injection
Fortinet FortiAuthenticator 3.0.0 allows local users to read arbitrary files via the -f flag to the dig command...
CVE-2015-1457
CVE-2015-1457 affects Fortinet FortiAuthenticator 3.0.0, where local users can read arbitrary files via the -f flag to the dig command. Connected sources indicate multiple related advisories; one threat intel note lists affected products as FortiAuthenticator versions earlier than 3.2.1 and recom...
