CVE-2021-26088

PowerShellで書かれたCVE-2021-26088のPoC 説明 FSSO Collectorの不適切な認証脆弱性により、認証されていないユーザーが特別に細工されたUDPログイン通知パケットを送信することで、任意のファイアウォール認証ルールをバイパスし、保護されたネットワークにアクセスできる可能性があります。 https://www.fortiguard.com/psirt/FG-IR-20-191 内容 forgeauth.ps1: メインエクスプロイト checksrcport.ps1: 現在のユーザーに割り当てられた送信元ポート範囲を取得 免責事項...

CVE-2021-26088

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...

CVE-2021-26088: Improper Authentication

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...

PT-2021-7635

Name of the Vulnerable Software and Affected Versions Fortinet Single Sign-On FSSO Collector versions 5.0.295 and below Description The issue is related to an improper authentication mechanism in the FSSO Collector, which can be exploited by a remote attacker to gain access to the protected...