PT-2016-3274 · Fortinet · Fortios

Javier Nieto · Publicado 2016-04-08 · Atualizado 2016-04-14 · CVE-2016-3978

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions FortiOS versions 5.0.x through 5.0.12 FortiOS versions 5.2.x through 5.2.2 FortiOS versions 5.4.x before 5.4.0

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or cross-site scripting (XSS) attacks via the redirect parameter to "login". This is due to insufficient protection of the web page structure, which may allow an attacker to inject arbitrary JavaScript or HTML code.

Recommendations For FortiOS versions 5.0.x through 5.0.12, update to version 5.0.13 or later. For FortiOS versions 5.2.x through 5.2.2, update to version 5.2.3 or later. For FortiOS versions 5.4.x before 5.4.0, update to version 5.4.0 or later. As a temporary workaround, consider restricting access to the "login" endpoint to minimize the risk of exploitation. Avoid using the redirect parameter in the affected API endpoint until the issue is resolved.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2018-01292

CVE-2016-3978

Produtos afetados

Fortios

Referências · 7

• https://osv.dev/vulnerability/CVE-2016-3978 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2018-01292 · Nota de Segurança
• http://seclists.org/fulldisclosure/2016/Mar/68 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-3978 · Nota de Segurança
• http://fortiguard.com/advisory/fortios-open-redirect-vulnerability · Aviso do Fabricante
• https://seclists.org/fulldisclosure/2016/Mar/68 · Nota
• http://securitytracker.com/id/1035332 · Nota