Fortinet Products Multiple Vulnerabilities

Release Date: 6 Oct 2021 4416 Views

RISK: High Risk

TYPE: Operating Systems - Networks OS

Multiple vulnerabilities were identified in Fortinet Products, a remote attacker could exploit some of these vulnerabilities to trigger remote code execution, sensitive information disclosure, security restriction bypass, data manipulation and cross-site scripting on the targeted system.

Impact

Cross-Site Scripting
Security Restriction Bypass
Information Disclosure
Remote Code Execution
Data Manipulation

System / Technologies affected

FortiAnalyzer 7.0.0 and prior versions
FortiManager 7.0.0 and prior versions
FortiClientEMS 6.4.1 and prior versions
FortiSDNConnector 1.1.7 and prior versions
FortiAuthenticator 6.3.0 and prior versions
FortiWebManager 6.2.3 and prior versions
FortiSandbox 4.0.0 and prior versions

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:
https://www.fortiguard.com/psirt/FG-IR-21-112
https://www.fortiguard.com/psirt/FG-IR-20-183
https://www.fortiguard.com/psirt/FG-IR-21-068
https://www.fortiguard.com/psirt/FG-IR-20-027
https://www.fortiguard.com/psirt/FG-IR-20-234
https://www.fortiguard.com/psirt/FG-IR-20-074

Vulnerability Identifier

Source

Fortinet