CVE-2021-26088

PowerShell로 작성된 CVE-2021-26088 PoC 설명 FSSO Collector의 부적절한 인증 취약점으로 인해 인증되지 않은 사용자가 특수하게 제작된 UDP 로그인 알림 패킷을 전송하여 모든 방화벽 인증 규칙을 우회하고 보호된 네트워크에 접근할 수 있습니다. https://www.fortiguard.com/psirt/FG-IR-20-191 내용 forgeauth.ps1: 주요 익스플로잇 checksrcport.ps1: 현재 사용자에게 할당된 소스 포트 범위 확인 면책 조항 이 저장소에서 제공되는 도구는 교육 및...

EUVD-2021-12909

Malware in sbrugna...

CVE-2021-26088

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...

CVE-2021-26088

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...

Authentication flaw

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...

CVE-2021-26088

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...

CVE-2021-26088

CVE-2021-26088 affects Fortinet FSSO Collector (versions 5.0.295 and earlier). The vulnerability is improper authentication that can let an unauthenticated user bypass a FSSO firewall policy and access the protected network by sending specially crafted UDP login notification packets. Impact descr...

CVE-2021-26088: Improper Authentication

An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...