This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.

[TLP:CLEAR] Fortinet fixes 9 vulnerabilities in various products

Fortinet is fixing 9 vulnerabilities in various products. Products and their fixed versions: FortiWebManager - 7.2.1, 7.0.5, 6.3.1, 6.2.5 [1] FortiAuthenticator - 6.6.1, 6.5.4 [2] FortiWeb - 7.4.3, 7.2.8 [3][6] FortiPortal - 6.0.15 [4] FortiSOAR - 7.3.1[5]

FortiWebManager - unauthorized actions
CVSS 8.8 (High)

An authenticated remote attacker with read permissions can perform unauthorized actions in FortiWebManager using HTTP requests or the command line [1].

The vulnerability is present in product:

  • FortiWebManager; >=7.2.0, <7.2.1; >=7.0.0, <7.0.5; >=6.3.0, <6.3.1; >=6.2.3, <6.2.5; ==6.0.2;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F

More information:

The vulnerability was publicly disclosed 14. 5. 2024.

FortiAuthenticator - redirect to arbitrary website (CVE-2024-23664)
CVSS 6.1 (Medium)

An unauthenticated remote attacker can redirect victims to potentially malicious websites in FortiAuthenticator using specially crafted URLs [2].

The vulnerability is present in product:

  • FortiAuthenticator; >=6.6.0, <6.6.1; >=6.5.0, <6.5.4; >=6.4.0, <6.5.0;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:U/RC:C

More information:

The vulnerability was publicly disclosed 14. 6. 2024.

FortiWeb - unauthorized ADOM operations (CVE-2024-23665)
CVSS 5.9 (Medium)

An authenticated remote attacker can perform unauthorized operations on administrative domains in FortiWeb using specially crafted requests [3].

The vulnerability is present in product:

  • FortiWeb; >=7.4.0, <7.4.3; >=7.2.0, <7.2.8; >=7.0.0, <7.1.0; >=6.4.0, <6.5.0; >=6.3.0, <6.4.0;

CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N/E:P/RL:X/RC:C

More information:

The vulnerability was publicly disclosed 14. 5. 2024.

FortiPortal - information leak (CVE-2023-48789)
CVSS 4.3 (Medium)

An authenticated remote attacker with customer privileges can gain unauthorized access to information about other customers in FortiPortal using specially crafted HTTP requests [4].

The vulnerability is present in product:

  • FortiPortal; >=6.0.0, <6.0.15;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:X

More information:

The vulnerability was publicly disclosed 14. 5. 2024.

FortiSOAR - passwords leak (CVE-2024-31493)
CVSS 6.5 (Medium)

An authenticated remote attacker can potentially read plaintext passwords from connectors in FortiSOAR using HTTP requests [5].

The vulnerability is present in product:

  • FortiSOAR; >=7.3.0, <7.3.1;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U

More information:

The vulnerability was publicly disclosed 14. 5. 2024.

FortiWeb - password leak (CVE-2024-23107)
CVSS 5.5 (Medium)

An authenticated local attacker can view password hashes in FortiWeb without authorization using the command line or HTTP requests [6].

The vulnerability is present in product:

  • FortiWeb; >=7.4.0, <7.4.1; >=7.2.0, <7.2.5; >=7.0.0, <7.0.9;

CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:X/RC:C

More information:

The vulnerability was publicly disclosed 14. 5. 2024.

By CESNET, z.s.p.o. Martin Krajči on 4. 6. 2024.

CESNET, z.s.p.o. Logo