FortiHeartBeat Configuration Unauthorized Access

The vulnerability of the configuration for listening to device connections from FortiHeartBeat devices fabric/fortiheartbeat/endpoint-compliance on FortiOS operating systems and FortiGate network interfaces is related to incorrect registration of traffic for the IP address range. Exploiting this...

Fortinet FortiClient for Windows权限提升漏洞

Fortinet FortiClient is a mobile endpoint security solution from Fortinet, Inc. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication when connected to a FortiGate firewall appliance. executable file in the FortiClient installer...

Fortigate 6.2.3 fails to log traffic to IP addresses 173.243.138.98 - 173.243.138.110

FortiGate may fail to record traffic destined to Fortinet owned IP addresses i.e. traffic destined to the following subnets: 173.243.128.0/20, 96.45.32.0/20 As an example, traffic generated by FortiClient/FortiClient EMS via the FortiGate in order to request updates from the FortiGuard distribute...

CVE-2012-0941

Multiple cross-site scripting XSS vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before 4.3.6 allow remote attackers to inject arbitrary web script or HTML via vectors involving the 1 Endpoint Monitor, 2 Dialup List, or 3 Log&Report Display modules, or the...