Fortilink lack of certificate validation

...

CVE-2022-27488

A cross-site request forgery CSRF in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version 7.0.0 through 7.0.3, 6.4.0 through 6.4.6, 6.2.x, 6.0.x FortiRecorder version 6.4.0 through 6.4.2,...

CVE-2022-27488

A cross-site request forgery CSRF in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version 7.0.0 through 7.0.3, 6.4.0 through 6.4.6, 6.2.x, 6.0.x FortiRecorder version 6.4.0 through 6.4.2,...

Cross site request forgery (csrf)

A cross-site request forgery CSRF in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version 7.0.0 through 7.0.3, 6.4.0 through 6.4.6, 6.2.x, 6.0.x FortiRecorder version 6.4.0 through 6.4.2,...

CVE-2022-27488

CVE-2022-27488 describes a cross-site request forgery (CSRF) vulnerability in multiple Fortinet products (FortiVoiceEnterprise, FortiSwitch, FortiMail, FortiRecorder, FortiNDR) where an unauthenticated attacker can cause an authenticated admin to trigger commands on the CLI via a crafted HTTP GET...

CVE-2022-27488: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version 7.0.0 through 7.0.3, 6.4.0 through 6.4.6, 6.2.x, 6.0.x FortiRecorder version 6.4.0 through 6.4.2,...

Fortinet FortiVoice Security Vulnerability

Fortinet FortiSwitch and others are products of Fortinet, Inc. FortiSwitch is a switch product and Fortinet FortiVoice is a product of tine and others are products of tine, Inc. tine is a team collaboration software. A security vulnerability exists in Fortinet FortiVoiceEnterprise, FortiSwitch,...

PT-2023-8025 · Fortinet · Fortiswitch +4

Name of the Vulnerable Software and Affected Versions: FortiVoiceEnterprise versions 6.0.x through 6.4.x FortiSwitch versions 6.0.x through 7.0.4 FortiMail versions 6.0.x through 7.0.3 FortiRecorder versions 2.6.x through 6.4.2 FortiNDR version 1.x.x Description: A cross-site request forgery CSRF...

Cross-site scripting forgery (CSRF) in HTTPd CLI console

...

PT-2023-8535 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.4 through 7.0.13 FortiOS versions 7.2.0 through 7.2.6 FortiOS versions 7.4.0 through 7.4.1 Description: The issue is related to an improper certificate validation procedure in the FortiLink protocol implementation, allowing...

Fortinet Sensitive Information Disclosure

The vulnerabilities of the Fortinet FortiManager device management software, FortiAnalyzer network monitoring software, FortiSwitch network switch software, and Fortinet FortiPortal security analysis and management tool are related to the lack of protection for sensitive data. Exploiting these...

CVE-2022-27490

A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, FortiAnalyzer version 6.0.0 through 6.0.4, FortiPortal version 6.0.0 through 6.0.9, 5.3.0 through 5.3.8, 5.2.x, 5.1.0, 5.0.x, 4.2.x, 4.1.x, FortiSwitch version 7.0.0 through 7.0.4,...

Design/Logic Flaw

A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, FortiAnalyzer version 6.0.0 through 6.0.4, FortiPortal version 6.0.0 through 6.0.9, 5.3.0 through 5.3.8, 5.2.x, 5.1.0, 5.0.x, 4.2.x, 4.1.x, FortiSwitch version 7.0.0 through 7.0.4,...

CVE-2022-27490

Fortinet information disclosure CVE-2022-27490 affects FortiManager (6.0.0–6.0.4), FortiAnalyzer (6.0.0–6.0.4), FortiPortal (6.0.0–6.0.9, 5.3.0–5.3.8, 5.2.x, 5.1.0, 5.0.x, 4.2.x, 4.1.x), and FortiSwitch (7.0.0–7.0.4, 6.4.0–6.4.10, 6.2.x, 6.0.x). Root cause is exposure of sensitive data via diagno...

CVE-2022-27490

A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, FortiAnalyzer version 6.0.0 through 6.0.4, FortiPortal version 6.0.0 through 6.0.9, 5.3.0 through 5.3.8, 5.2.x, 5.1.0, 5.0.x, 4.2.x, 4.1.x, FortiSwitch version 7.0.0 through 7.0.4,...

PT-2023-1859 · Fortinet · Fortiswitch +3

Name of the Vulnerable Software and Affected Versions: FortiManager versions 6.0.0 through 6.0.4 FortiAnalyzer versions 6.0.0 through 6.0.4 FortiPortal versions 4.1.x through 5.3.8 FortiPortal versions 5.0.x through 6.0.9 FortiSwitch versions 6.0.x through 7.0.4 FortiSwitch versions 6.2.x through...

CVE-2022-27490: Exposure of Sensitive Information to an Unauthorized Actor

A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, FortiAnalyzer version 6.0.0 through 6.0.4, FortiPortal version 6.0.0 through 6.0.9, 5.3.0 through 5.3.8, 5.2.x, 5.1.0, 5.0.x, 4.2.x, 4.1.x, FortiSwitch version 7.0.0 through 7.0.4,...

FortiManager, FortiAnalyzer, FortiPortal & FortiSwitch - Information disclosure through diagnose debug commands

An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in FortiManager, FortiAnalyzer, FortiPortal & FortiSwitch may allow an attacker which has obtained access to a restricted administrative account to obtain sensitive information via diagnose debug commands...

FortiOS Web Interface File Read/Write

The vulnerability in the web interface of FortiOS operating systems, the local software management platform FortiSwitch Manager, and the proxy server for internet attack protection, FortiProxy, is related to errors in processing the relative path to the directory. Exploiting this vulnerability...

FortiOS FortiWeb FortiSwitch FortiProxy Information Disclosure

Vulnerabilities of FortiOS operating systems, FortiWeb network firewalls for web applications, FortiSwitch Ethernet switches, and FortiProxy proxy servers are related to improper verification of cryptographic signatures. Exploiting these vulnerabilities can allow attackers to disclose sensitive...