Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Fortinet FortiOS und Fortinet FortiProxy ausnutzen um beliebigen Code auszuführen, Daten zu manipulieren, Informationen auszuspähen und Sicheheitsfunktionen zu umgehen.
Product
FortiOS ist ein gehärtetes Betriebssystem für FortiGate Plattformen.
FortiProxy ist eine Web-Proxy Lösung.
Vulnerabilities 7
-
Medium 6.8
An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below,…
-
Medium 6.3
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through…
-
Medium 4.8
An Improperly Implemented Security Check for Standard vulnerability [CWE-358] vulnerability in Fortinet FortiOS 7.6.0 t…
-
Medium 4.5
An Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] vulnerability in Fortinet FortiOS…
-
Medium 4.2
An improper authorization vulnerability [CWE-285] vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 …
-
Low 2.6
A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 a…
-
Low 2.5
An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, F…
Revision history
-
#1
Initiale Fassung
References
-
FortiGuard PSIRT Advisory FG-IR-24-457 vom 2025-10-14
https://www.fortiguard.com/psirt/FG-IR-24-457
-
FortiGuard PSIRT Advisory FG-IR-24-372 vom 2025-10-14
https://www.fortiguard.com/psirt/FG-IR-24-372
-
FortiGuard PSIRT Advisory FG-IR-24-542 vom 2025-10-14
https://www.fortiguard.com/psirt/FG-IR-24-542
-
FortiGuard PSIRT Advisory FG-IR-24-452 vom 2025-10-14
https://www.fortiguard.com/psirt/FG-IR-24-452
-
FortiGuard PSIRT Advisory FG-IR-23-354 vom 2025-10-14
https://www.fortiguard.com/psirt/FG-IR-23-354
-
FortiGuard PSIRT Advisory FG-IR-25-684 vom 2025-10-14
https://www.fortiguard.com/psirt/FG-IR-25-684