Fortinet - PSIRT Advisories

PSIRT Advisories

PSIRT Advisories

• FortiAnalyzer - CSV injection in macro name
• FortiAnalyzer -- the log-fetch client request password is shown in clear text in the heartbeat response
• FortiAuthenticator, FortiDeceptor & FortiMail - Improper restriction over excessive authentication attempts
• FortiManager, FortiAnalyzer, FortiPortal & FortiSwitch - Information disclosure through diagnose debug commands
• FortiNAC - Multiple privilege escalation via sudo command
• FortiNAC - Multiple Reflected XSS
• FortiOS - Path traversal in execute command
• FortiOS / FortiProxy - Heap buffer underflow in administrative interface
• FortiOS / FortiProxy - Path traversal vulnerability allows VDOM escaping
• FortiOS / FortiProxy - Unauthenticated access to static files containing logging information
• FortiOS & FortiProxy - Access of NULL pointer in SSLVPNd
• FortiRecorder - DoS in login authentication mechanism
• FortiSOAR - Improper Authorization in request headers
• FortiWeb - command injection in webserver
• FortiWeb and FortiRecorder - Arbitrary file read through command line pipe
• FortiADC - OS command injection vulnerability in CLI
• FortiAnalyzer - XSS vulnerability due to AngularJS Client-Side Template injection
• FortiExtender - multiple command injection vulnerabilities in webserver
• FortiNAC - External Control of File Name or Path in keyUpload scriptlet
• FortiNAC - Multiple Command Injections in webserver
• FortiNAC - Multiple reflected cross-site scripting vulnerabilities in portal UI
• FortiNAC - Multiple Stored and Reflected XSS
• FortiNAC - Multiple XML external entity (XXE) injection
• FortiNAC - Unauthenticated access to administrative operations
• FortiNAC - Weak password storage
• FortiNAC : Wrong use of cryptographic primitives
• FortiOS -- XSS vulnerability in the Login page when FortiCloud Sign-in is used
• FortiOS / FortiProxy - Flaws over DHCP and DNS keys encryption scheme
• FortiOS & FortiProxy - Ability to modify privileges from Custom to Read-Write
• FortiOS & FortiProxy - header injection in proxy login page