1811 matches found
CVE-2018-13383: Out-of-bounds Write
A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to properly handle...
X (Formerly Twitter): Potential pre-auth RCE on Twitter VPN
Hi, weOrange Tsai and Meh Chang are the security research team from DEVCORE. Recently, we are doing a research about SSL VPN security, and found several critical vulnerabilities on Pulse Secure SSL VPN! We have reported to vendor and patches have been released on 2019/4/25. Since that, we keep...
Protect
Failure to sanitize the login redir parameter in the SSL-VPN web portal may allow an attacker to perform a Cross-site Scripting XSS or an URL Redirection attack...
PT-2019-3002
Name of the Vulnerable Software and Affected Versions FortiOS versions 6.0.0 through 6.0.4 FortiOS versions 5.6.3 through 5.6.7 FortiOS versions 5.4.6 through 5.4.12 FortiProxy version 2.0.0 FortiProxy versions 1.2.0 through 1.2.8 FortiProxy versions 1.1.0 through 1.1.6 FortiProxy versions 1.0.0...
PT-2019-5813
Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions 5.2 and below Fortinet FortiOS versions 5.4.0 through 5.4.12 Fortinet FortiOS versions 5.6.0 through 5.6.7 Fortinet FortiOS versions 6.0.0 through 6.0.4 Fortinet FortiProxy version 1.2.8 and below Fortinet FortiProxy...
Protect
A path traversal vulnerability in the FortiOS SSL VPN web portal may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests...
PT-2019-2514
Name of the Vulnerable Software and Affected Versions FortiOS versions 6.0.0 through 6.0.4 Description The issue is related to a lack of input sanitization in the SSL VPN web portal of the FortiOS operating system. This can be exploited by a remote attacker to perform a reflected Cross-Site...
PT-2019-2513
Name of the Vulnerable Software and Affected Versions FortiOS versions 5.2.0 through 5.6.10 FortiOS versions 6.0.0 through 6.0.4 Description A reflected Cross-Site-Scripting XSS issue in the SSL VPN web portal is related to the failure to sanitize input. This may allow an attacker to execute...
PT-2019-5814
Name of the Vulnerable Software and Affected Versions FortiOS versions 5.4 and earlier FortiOS versions 5.6.0 through 5.6.7 FortiOS versions 6.0.0 through 6.0.4 FortiProxy version 1.2.8 and earlier FortiProxy version 2.0.0 Description A buffer overflow vulnerability under the SSL VPN web portal...
PT-2019-5812
Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions prior to 6.0.5 Description A Host Header Redirection issue allows a remote attacker to potentially poison HTTP cache and redirect SSL VPN web portal users to arbitrary web domains. This is achieved by submitting...
CVE-2019-1714
CVE-2019-1714 affects Cisco ASA and Cisco Firepower Threat Defense (FTD) software, where the SAML 2.0 SSO implementation has improper credential handling for NTLM or basic authentication. An unauthenticated, remote attacker could open a VPN session after another user has authenticated via SAML SS...
Uber: Pre-auth Remote Code Execution on multiple Uber SSL VPN servers
format string vulnerability on /sslmgr with no authentication required Details: http://blog.orange.tw/2019/07/attacking-ssl-vpn-part-1-preauth-rce-on-palo-alto.html...
CVE-2018-13283
Lack of administrator control over security vulnerability in client.cgi in Synology SSL VPN Client before 1.2.5-0226 allows remote attackers to conduct man-in-the-middle attacks via the 1 command, 2 hostname, or 3 port parameter...
CVE-2018-13283
CVE-2018-13283 affects the Synology SSL VPN Client before 1.2.5-0226. A vulnerability in client.cgi allows remote attackers to perform man-in-the-middle attacks using manipulated command, hostname, or port parameters. Impact per NVD is high (CVSS v3.0: 7.4) with high confidentiality and integrity...
CVE-2018-13283
Lack of administrator control over security vulnerability in client.cgi in Synology SSL VPN Client before 1.2.5-0226 allows remote attackers to conduct man-in-the-middle attacks via the 1 command, 2 hostname, or 3 port parameter...
PT-2019-8948
Name of the Vulnerable Software and Affected Versions Synology SSL VPN Client versions prior to 1.2.5-0226 Description The issue is related to a lack of administrator control over security vulnerabilities in the client.cgi component. This allows remote attackers to conduct man-in-the-middle attac...
CVE-2018-13283: Lack of Administrator Control over Security
Lack of administrator control over security vulnerability in client.cgi in Synology SSL VPN Client before 1.2.5-0226 allows remote attackers to conduct man-in-the-middle attacks via the 1 command, 2 hostname, or 3 port parameter...
Fortinet SSL VPN Bruteforce Login Utility
This module scans for Fortinet SSL VPN web login portals and performs login brute force to identify valid credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Fortinet SSL VPN Bruteforc...
Juniper Secure Access SSL VPN Privilege Escalation Vulnerability
Certain Secure Access SA Series SSL VPN products originally developed by Juniper Networks but now sold and supported by Pulse Secure, LLC allow privilege escalation, as demonstrated by Secure Access SSL VPN SA-4000 5.1R5 build 9627 4.2 Release build 7631. This occurs because appropriate controls...
