Vulnerabilidades do Fortinet Fortinet FortiOS, FortiProxy
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Fortinet Fortinet FortiOS, FortiProxy: 2 registro(s), com versões afetadas e correções.
CVE-2018-13379
Crítica · 9.8
KEV Urgente · 100 Exploit público Ransomware CWE-22 04/06/2019
Fortinet FortiOS SSL VPN Path Traversal Vulnerability
An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.
CVE-2018-13382
Alta · 7.5
KEV Urgente · 83 Exploit público Ransomware CWE-863 04/06/2019
Fortinet FortiOS and FortiProxy Improper Authorization
An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to modify the password of an SSL VPN web portal user via specially crafted HTTP requests