Fortinet Products Multiple Vulnerabilities

Last Update Date: 28 May 2019 10:57 Release Date: 28 May 2019 5295 Views

RISK: Medium Risk

TYPE: Operating Systems - Networks OS

Multiple Vulnerabilities were identified in Fortinet Products, a remote attacker can exploit these vulnerabilities to trigger cross site scripting, elevation of privilege, security restriction bypass and sensitive information disclosure on the targeted system.

Impact

Cross-Site Scripting
Elevation of Privilege
Security Restriction Bypass
Information Disclosure

System / Technologies affected

FortiOS
FortiAP
FortiSwitch
FortiAnalyzer

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to version:

FortiOS upgrade to 5.6.8, 6.0.5, 6.2.0 or newer versions
FortiAP upgrade to 5.6.5, 6.0.2 or newer versions
FortiSwitch upgrade to 3.6.3, 4.0.0 or newer versions
FortiAnalyzer upgrade to 5.6.6, 6.0.2 or newer versions

Vulnerability Identifier

Source

AusCERT