Fortinet - PSIRT Advisories

PSIRT Advisories

PSIRT Advisories

• Multiple Apache Vulnerabilities fixed in 2.4.52
• Apache log4j2 log messages substitution (CVE-2021-44228)
• FortiNAC - improper permissions set for tomcat users configuration file
• FortiWLM - stored cross-site scripting in hotspot profile controller
• FortiWLM - SQL Injection in script handlers
• FortiWLM - reflected cross-site scripting vulnerability in cgi_bin handlers
• FortiSandbox, FortiWeb, FortiADC, FortiMail - Multiple cryptographic flaws allow for full LDAP and RADIUS passwords compromise
• FortiOS & FortiProxy - SSL-VPN portal is vulnerable to CSRF
• FortiOS & FortiProxy -- Path traversal vulnerability
• FortiOS and FortiProxy - Privilege escalation vulnerability using the automation script feature