CheckPoint / Sofaware Firewall XSS / CSRF / Redirection / Disclosure

CheckPoint/Sofaware firewalls suffer from redirection, cross site request forgery, cross site scripting, and information disclosure vulnerabilities. Multiple peristent XSS, XSS, XSRF, offsite redirection and information disclosure flaws within CheckPoint/Sofaware firewalls Vulnerability found: 3r...

CheckPoint/Sofaware Firewall XSS / CSRF / Redirection / Disclosure

ProCheckUp Research http://procheckup.com/procheckup-labs/pr11-07.aspx PR11-07 Multiple peristent XSS, XSS, XSRF, offsite redirection and information disclosure flaws within CheckPoint/Sofaware firewalls Vulnerability found: 3rd May 2011 Vendor informed: 20th July 2011 Vulnerability fixed: 16th...

Fortigate UTM appliances share the same default CA certificate

Overview Fortigate UTM appliances that support SSL/TLS deep packet inspection share the same self-signed Fortigate CA certificate and associated private key across all devices. The private key, which has been compromised, allows attackers to create and sign fake certificates. Description Fortigat...

GTA UTM Firewall multiple security vulnerabilities

Multiple crossite scripting possibilities...

Fortigate UTM WAF Appliance - Multiple Web Vulnerabilities

Title: ====== Fortigate UTM WAF Appliance - Multiple Web Vulnerabilities Date: ===== 2012-09-06 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=557 VL-ID: ===== 557 Common Vulnerability Scoring System: ==================================== 5 Introduction: ============= T...

GTA UTM Firewall GB 6.0.3 - Multiple Web Vulnerabilities

Title: ====== GTA UTM Firewall GB 6.0.3 - Multiple Web Vulnerabilities Date: ===== 2012-09-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=579 VL-ID: ===== 579 Common Vulnerability Scoring System: ==================================== 4 Introduction: ============= The...

Fortigate UTM WAF Appliance - Cross Site Vulnerabilities

Title: ====== Fortigate UTM WAF Appliance - Cross Site Vulnerabilities Date: ===== 2012-09-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=559 VL-ID: ===== 559 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: ============= T...

GTA UTM Firewall GB 6.0.3 - Multiple Web Vulnerabilities

Title: ====== GTA UTM Firewall GB 6.0.3 - Multiple Web Vulnerabilities Date: ===== 2012-09-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=579 VL-ID: ===== 579 Common Vulnerability Scoring System: ==================================== 4 Introduction: ============= The...

Fortigate UTM WAF Appliance multiple security vulnerabilities

Privilege escalation, crossite scripting...

GTA UTM Firewall GB 6.0.3 Cross Site Scripting

Title: ====== GTA UTM Firewall GB 6.0.3 - Multiple Web Vulnerabilities Date: ===== 2012-09-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=579 VL-ID: ===== 579 Common Vulnerability Scoring System: ==================================== 4 Introduction: ============= The...

GTA UTM Firewall - Input Filter Bypass Vulnerability

Document Title: =============== GTA UTM Firewall - Input Filter Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/629.wmv View: http://www.youtube.com/watch?v=Aw3W2JQbjf8 Article: http://www.vulnerability-lab.com/getcontent.php?id=629 Advisor...

Fortigate UTM WAF Appliance Multiple Vulnerabilities

Multiple input validation vulnerabilitiespersistent are detected in the FortiGate UTM Appliance Application. Remote attackers & low privileged user accounts can inject persistent own malicious script code to manipulate specific customer/admin requests. Affected Products: ==================...

GTA UTM Firewall - Input Filter Bypass Vulnerability

Document Title: =============== GTA UTM Firewall - Input Filter Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/629.wmv View: http://www.youtube.com/watch?v=Aw3W2JQbjf8 Article: http://www.vulnerability-lab.com/getcontent.php?id=629 Advisor...

GTA UTM Firewall GB 6.0.3 - Multiple Web Vulnerabilities

Document Title: =============== GTA UTM Firewall GB 6.0.3 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=579 Release Date: ============= 2012-09-29 Vulnerability Laboratory ID VL-ID: ==================================== 57...

GTA UTM Firewall GB 6.0.3 - Multiple Web Vulnerabilities

Document Title: =============== GTA UTM Firewall GB 6.0.3 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=579 Release Date: ============= 2012-09-29 Vulnerability Laboratory ID VL-ID: ==================================== 57...

Fortigate UTM WAF Appliance - Cross Site Vulnerabilities

Document Title: =============== Fortigate UTM WAF Appliance - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=559 Release Date: ============= 2012-09-23 Vulnerability Laboratory ID VL-ID: ==================================== 55...

Fortigate UTM WAF Appliance - Cross Site Vulnerabilities

Document Title: =============== Fortigate UTM WAF Appliance - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=559 Release Date: ============= 2012-09-23 Vulnerability Laboratory ID VL-ID: ==================================== 55...

Fortigate UTM WAF Appliance - Multiple Vulnerabilities

Title: ====== Fortigate UTM WAF Appliance - Multiple Web Vulnerabilities Date: ===== 2012-09-06 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=557 VL-ID: ===== 557 Common Vulnerability Scoring System: ==================================== 5 Introduction: ============= T...

Fortigate UTM WAF Appliance Cross Site Scripting

Title: ====== Fortigate UTM WAF Appliance - Cross Site Vulnerabilities Date: ===== 2012-09-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=559 VL-ID: ===== 559 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: ============= T...

Fortigate UTM WAF Appliance - Multiple Vulnerabilities

Document Title: =============== Fortigate UTM WAF Appliance - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=557 Release Date: ============= 2012-08-29 Vulnerability Laboratory ID VL-ID: ==================================== 557...