October 12th, 2022: CyberHoot has is reporting on multiple authentication bypass vulnerabilities we’ve learned of in Fortinet products including:
OVERVIEW:
A vulnerability has been discovered in FortiOS, FortiProxy and FortiSwitchManager, which could allow for authentication bypass on administrative interface. FortiOS is the Fortinet’s proprietary Operation System which is utilized across multiple product lines. FortiProxy is a secure web proxy that protects employees against internet-borne attacks by incorporating multiple detection techniques. FortiSwitch Manager is an on-premise management platform for the FortiSwitch product. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
THREAT INTELLIGENCE:
Fortinet is aware of instances where there is an exploitation against the vulnerability.
RISK:
Government:
Businesses:
At the present time, Fortinet has not released fixes, only workarounds. Please visit this article for the Workarounds on how to disable or limit HTTPS access to your devices.
https://www.fortiguard.com/psirt/FG-IR-22-377
CVE: https://cve.mitre.org/cgi-bin/
Discover and share the latest cybersecurity trends, tips and best practices – alongside new threats to watch out for.
Spoiler alert: If you’re still using “password123” or “iloveyou” for your login… it’s time for an...
Read moreStop tricking employees. Start training them. Take Control of Your Security Awareness Training with a Platform...
Read moreGet sharper eyes on human risks, with the positive approach that beats traditional phish testing.