Fortinet Authentication Bypass Vulnerabilities

12th October 2022 | Advisory, Blog

October 12th, 2022: CyberHoot has is reporting on multiple authentication bypass vulnerabilities we’ve learned of in Fortinet products including:

FortiOS version 7.2.0 through 7.2.1
FortiOS version 7.0.0 through 7.0.6
FortiProxy version 7.2.0
FortiProxy version 7.0.0 through 7.0.6
FortiSwitchManager version 7.2.0
FortiSwitchManager version 7.0.0

OVERVIEW:
A vulnerability has been discovered in FortiOS, FortiProxy and FortiSwitchManager, which could allow for authentication bypass on administrative interface. FortiOS is the Fortinet’s proprietary Operation System which is utilized across multiple product lines. FortiProxy is a secure web proxy that protects employees against internet-borne attacks by incorporating multiple detection techniques. FortiSwitch Manager is an on-premise management platform for the FortiSwitch product. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.

THREAT INTELLIGENCE:
Fortinet is aware of instances where there is an exploitation against the vulnerability.

RISK:
Government:

Large and medium government entities: High
Small government entities: High

Businesses:

Large and medium business entities: High
Small business entities: High

What Should You Do?

At the present time, Fortinet has not released fixes, only workarounds. Please visit this article for the Workarounds on how to disable or limit HTTPS access to your devices.

https://www.fortiguard.com/psirt/FG-IR-22-377