3007 matches found
Vulnerabilities fixed in FortiOS
Vulnerabilities have been fixed in FortiOS. The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Cross-Site Scripting XSS. Remote code execution User Rights Access to sensitive data Access to system data Fortinet has released updates to...
Protect
A server-generated error message containing sensitive information vulnerability CWE-550 in FortiOS and FortiProxy web proxy may allow a malicious webserver to retrieve a web proxy's client username and IP via same origin HTTP requests triggering proxy-generated HTTP status codes pages...
Fortinet FortiOS 信息泄露漏洞
Fortinet FortiOS is a security operating system dedicated to the FortiGate network security platform from Fortinet, Inc. Fortinet FortiOS is vulnerable to an information leakage vulnerability that results from excessive data output in server-generated error messages, which can be exploited by...
Protect
An improper certificate validation vulnerability CWE-295 in FortiOS may allow a network adjacent and unauthenticated attacker to man-in-the-middle the communication between the FortiGate and some peers such as private SDNs and external cloud platforms...
Fortinet FortiOS 信任管理问题漏洞
Fortinet FortiOS is a security operating system dedicated to the FortiGate network security platform from Fortinet, a US-based company. Fortinet FortiOS is vulnerable to trust management issues, which could be exploited by attackers to conduct man-in-the-middle attacks on FortiGate communications...
Protect
An improper access control vulnerability CWE-284 in FortiOS may allow an authenticated attacker with a restricted user profile to gather sensitive information and modify the SSL-VPN tunnel status of other VDOMs using specific CLI commands...
Protect
An improper neutralization of input during web page generation vulnerability CWE-79 in FortiProxy and FortiOS web filter override form may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests...
Fortinet FortiOS 安全漏洞
Fortinet FortiOS is a dedicated security operating system for the FortiGate network security platform from Fortinet, Inc. Fortinet FortiOS versions 6.4.8 and earlier and 7.0.3 and earlier are vulnerable to an access control error that could be exploited by an authenticated attacker with a...
The vulnerability of the FortiOS operating systems and the FortiProxy proxy server, related to errors in processing the relative path to the directory, allows attackers to gain unauthorized access to protected information and enhance their privileges.
The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized...
The vulnerability in the implementation of the “execute restore src-vis” command in FortiOS operating systems allows a hacker to write arbitrary files.
The vulnerability in the execution of the “execute restore src-vis” command in FortiOS operating systems lies in the loading of code without checking its integrity. Exploiting this vulnerability allows an attacker to write arbitrary files using specially crafted update packages...
The vulnerability of the FortiOS operating system, related to insufficient verification of CN/SAN certificates, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the FortiOS operating system is related to insufficient verification of the authenticity of the CN/SAN certificates. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the SSL-VPN portal for FortiOS operating systems allows a hacker to obtain the encryption key.
The vulnerability of the SSL-VPN portal for FortiOS operating systems is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow a malicious actor to obtain the encryption key remotely...
The vulnerability of the FortiGate network firewall’s debugging function for FortiOS operating systems allows a hacker to execute arbitrary code or commands.
The vulnerability of the FortiGate network firewall’s debugging function for FortiOS operating systems is related to authentication errors. Exploiting this vulnerability allows a perpetrator to execute unauthorized code or commands using certain console command sequences like “print str” and “cmd...
The vulnerability of the SSL VPN orchestrator for FortiOS operating systems allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the SSL VPN orchestrator for FortiOS systems is related to a numerical overflow condition. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted requests...
The vulnerability of the client library for TFTP in FortiOS operating systems, the network interface for web applications FortiWeb, and the proxy server FortiProxy allows a perpetrator to execute arbitrary code.
The vulnerability of the client library for TFTP in FortiOS operating systems, the network interface for web applications FortiWeb, and the proxy server FortiProxy are related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially...
The vulnerability of the FortiOS operating system’s signature verification function allows a hacker to execute arbitrary code.
The vulnerability of the FortiOS operating system’s signature verification function is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created installation images...
The vulnerability of the command-line interface of FortiOS operating systems allows attackers to disclose sensitive information.
The vulnerability of the command-line interface of FortiOS operating systems is related to access control deficiencies. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security measures...
Vulnerability of the firmware verification process for FortiOS operating systems. The network interface layer of FortiWeb web applications, FortiSwitch Ethernet switches, and FortiProxy proxy servers allow a hacker to execute arbitrary code.
The vulnerabilities of the FortiOS firmware verification process, the FortiWeb network interface layer, the FortiSwitch Ethernet switches, and the FortiProxy proxy server are related to the exploitation of the buffer boundary. Exploiting these vulnerabilities allows an attacker operating remotely...
Fortinet FortiGate Detection Consolidation
Consolidation of Fortinet FortiGate detections. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...
The vulnerability of FortiOS operating systems, related to the lack of protection for service data, allows attackers to gain unauthorized access to protected information.
The vulnerability of the FortiOS operating systems is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information by sending a specially crafted Client Hello message in TLS SNI...