FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or …
Posts tagged: Fortinet
Improper limitation of a pathname to a restricted directory
An unauthenticated attacker can send crafted HTTP or HTTPS requests to write arbitrary files onto a Fortinet device, bypassing path restrictions and NULL-byte filtering, with no login required.
Fortinet FortiMail Path Traversal Vulnerability
An unauthenticated attacker can send crafted requests to FortiMail’s web interface and write arbitrary files onto the underlying system, with no login required and active exploitation already confirmed.
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
A network-reachable heap overflow in FortiOS, FortiSwitchManager and FortiSASE lets unauthenticated attackers send crafted packets to run unauthorised code, and it’s already known to be exploited.
Improper Authentication of FortiPAM Server
A Chrome extension that mediates FortiPAM privileged access sessions can be tricked into routing a user’s browser traffic through an attacker’s servers just by visiting a malicious site.