EUVD-2017-5701

Malware in sbrugna...

CVE-2017-14191

An Improper Access Control vulnerability in Fortinet FortiWeb 5.6.0 up to but not including 6.1.0 under "Signed Security Mode", allows attacker to bypass the signed user cookie protection by removing the FortiWeb own protection session cookie...

Improper access control

An Improper Access Control vulnerability in Fortinet FortiWeb 5.6.0 up to but not including 6.1.0 under "Signed Security Mode", allows attacker to bypass the signed user cookie protection by removing the FortiWeb own protection session cookie...

CVE-2017-14191

Fortinet FortiWeb is affected by CVE-2017-14191. In FortiWeb 5.6.0 up to but not including 6.1.0, operating under Signed Security Mode, an improper access control vulnerability allows an attacker to bypass the cookie protection by removing FortiWeb’s own protection session cookie. Impact stated: ...