Fortinet - PSIRT Advisories

PSIRT Advisories

PSIRT Advisories

• FortiOS - Stored cross-site scripting in replacement messages visualization
• FortiSOAR - HTML Injection Vulnerabilities
• FortiSandbox & FortiDeceptor - Insufficient logging and lack of limitation of failed authentication attempts
• FortiOS & FortiProxy - SSH authentication bypass when RADIUS authentication is used
• FortiADC - Improper input validation in download features
• FortiADC - SQL injection vulnerability in configuration backup feature
• AV Engine - evasion by manipulating MIME attachment
• FortiMail - Inter-domain information leakage
• FortiOS -- Read-Only users able to modify the Interface fields using the API
• FortiClient (MAC) - FortiTray stores the SSLVPN password in cleartext
• FortiOS -- Telnet on the SSL-VPN interface results in information leak
• FortiADC - Stored XSS vulnerability in external resource page
• FortiEDR CollectorWindows - protection bypass by killing the process with special tools
• FortiOS - RSA SSH host key lost at shutdown
• FortiTester - Command injection in CLI command
• FortiTester - Undocumented shell command
• FortiSIEM - Glassfish local credentials stored in plain text
• FortiDeceptor - Reflected XSS vulnerability on Lure Resources page
• FortiADC - Persistent XSS in Log pages
• FortiSOAR - PostgreSQL DB access to local users
• FortiADC - WAF XSS Injection Bypass
• FortiManager/FortiAnalyzer - XSS Vulnerability in Report Templates
• Apache commons_text(CVE-2022-42889) and commons_configuration (CVE-2022-33980) vulnerability
• OpenSSL3 CVE-2022-3602 CVE-2022-3786 vulnerabilities
• FortiTester - Unauthenticated command injection
• FortiTester - Authenticated command injection in certificate import feature
• FortiTester - Missing account lockout on telnet port
• FortiAnalyzer & FortiManager - improper authorization to template image
• FortiOS - Privilege escalation via switch-control CLI command
• FortiOS / FortiProxy - Access to NULL pointer in SSL VPN portal