The vulnerability of the FortiOS operating system allows a perpetrator to disclose sensitive information or perform unauthorized user disconnection operations.

The vulnerability of the FortiOS operating system relates to an error in the handling of the Payload parameter and the lack of verification of request authenticity. Exploiting this vulnerability allows a malicious actor to perform cross-site forgery of requests to the /logindisconnect/currentadmi...

The vulnerability of the page handler /login_disconnect/current_admins in the FortiOS operating system interface allows a hacker to trigger a service failure.

The vulnerability of the /logindisconnect/currentadmins page handler in the FortiOS operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures by using a specially crafted POST request...

The vulnerability of the page handler /login_disconnect/current_admins in the FortiOS operating system allows a hacker to upload arbitrary files to the device.

The vulnerability of the /logindisconnect/currentadmins page handler in the FortiOS operating system is related to access control errors. Exploiting this vulnerability allows a malicious actor to upload arbitrary files to a device using specially crafted POST requests...

The vulnerability of the FortiOS operating system, related to access control errors, allows a perpetrator to execute arbitrary code.

The vulnerability of the FortiOS operating system is related to access control errors. Exploiting this vulnerability allows a person with administrator privileges to execute arbitrary code by creating a symbolic link to an executable file in the “/bin/” directory...

The vulnerability of the page handler /api/cmdb web interface of the FortiOS operating system allows attackers to execute cross-site scripting attacks.

The vulnerability of the page handler /api/cmdb web interface of the FortiOS operating system is related to errors during HTTP request filtering. Exploiting this vulnerability allows a malicious actor to perform cross-site attacks using specially crafted POST requests sent to the /api/cmdb page...

The vulnerability of the FortiOS operating system, related to access control errors, allows a perpetrator to read and write data in the memory loading sector.

The vulnerability of the FortiOS operating system is related to access control errors. Exploiting this vulnerability allows a person with administrator privileges to read and write data in the memory load sector...

Exploit for Path Traversal in Fortinet Fortiproxy

CVE-2018-13379 CVE-2018-13379 https://blog.orange.tw/2019/0...

The vulnerability of the SSL VPN web portal of the operating system FortiOS, related to errors in the authentication mechanism of the web portal, allows a hacker to change the user password of the web portal.

The vulnerability of the SSL VPN web portal of the operating system FortiOS is related to errors in the authentication mechanism of the web portal. Exploiting this vulnerability allows a malicious actor to change the user password of the web portal through HTTP requests...

Protect

A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server...

PT-2019-4120

Name of the Vulnerable Software and Affected Versions FortiOS affected versions not specified Description A default configuration issue in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server. The issue relates to...

FortiOS TCP timestamp response

FortiOS by default enables TCP timestamp response, which may lead to information disclosure...

Protect

FortiOS Explicit Web Proxy by default allows non-standard HTTP traffic.Â...

The vulnerability of the ZebOS component of the FortiOS operating system, which allows a hacker to modify routing settings

The vulnerability of the ZebOS component of the FortiOS operating system is related to the improper assignment of privileges. Exploiting this vulnerability allows a malicious actor to remotely modify routing settings...

The vulnerability of the SSL VPN web portal of the operating system FortiOS allows a hacker to perform cross-site scripting attacks.

The vulnerability of the SSL VPN web portal of the operating system FortiOS is related to the lack of measures for sanitizing input data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks using the param parameter...

The vulnerability of the SSL VPN web portal of the operating system FortiOS allows a hacker to perform cross-site scripting attacks.

The vulnerability of the SSL VPN web portal of the operating system FortiOS is related to the lack of measures for securing input data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely, using the “err” parameter...

The vulnerability of the FortiOS operating system, related to resource management errors, allows attackers to disclose sensitive information.

The vulnerability of the FortiOS operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Fortinet FortiOS (Mac OS X) < 5.6.11, 6.0.x < 6.0.5 SSL VPN Heap Buffer Overflow (FG-IR-18-388) (deprecated)

The plugin was deprecated due to checking hosts for FortiClient instead of FortiOS. Use fortiosFG-IR-18-388.nasl plugin ID 125887 instead. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2020/11/18. Deprecated by fortiosFG-IR-18-388.nasl include"compat.inc"; if description scriptid12589...

Fortinet FortiOS (Mac OS X) <= 5.4, 5.6.x < 5.6.8, 6.0.x < 6.0.5 SSL VPN Buffer Overflow (FG-IR-18-387) (deprecated)

The plugin was deprecated due to checking hosts for FortiClient instead of FortiOS. Use fortiosFG-IR-18-387.nasl plugin ID 125886 instead. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2020/11/18. Deprecated by fortiosFG-IR-18-387.nasl include"compat.inc"; if description scriptid12589...

Fortinet FortiOS (Mac OS X) <= 5.4 / 5.6.x < 5.6.8 / 6.0.x < 6.0.5 SSL VPN Web Portal login redir XSS (FG-IR-17-242) (deprecated)

The plugin was deprecated due to checking hosts for FortiClient instead of FortiOS. Use fortiosFG-IR-17-242.nasl plugin ID 104886 instead. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2020/11/18. Deprecated by fortiosFG-IR-17-242.nasl include"compat.inc"; if description scriptid12589...

Fortinet FortiOS (Mac OS X) 5.4.1 < 5.4.11 / 5.6.x < 5.6.9 / 6.0.x < 6.0.5 SSL VPN Security Bypass (FG-IR-18-389) (deprecated)

The plugin was deprecated due to checking hosts for FortiClient instead of FortiOS. Use fortiosFG-IR-18-389.nasl plugin ID 125888 instead. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2020/11/18. Deprecated by fortiosFG-IR-18-389.nasl include"compat.inc"; if description scriptid12589...