PT-2017-17919 · Fortinet · Fortios

Publicado 2017-12-08 · Atualizado 2017-12-26 · CVE-2017-7738

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions 5.2 and below Fortinet FortiOS versions 5.4.0 through 5.4.5 Fortinet FortiOS versions 5.6.0 through 5.6.2

Description The issue allows an admin user with super admin privileges to view the current SSL VPN web portal session information, which may contain user credentials, through the fnsysctl CLI command. This could potentially lead to information disclosure.

Recommendations For Fortinet FortiOS versions 5.2 and below, update to a version above 5.2 to resolve the issue. For Fortinet FortiOS versions 5.4.0 through 5.4.5, update to a version above 5.4.5 to resolve the issue. For Fortinet FortiOS versions 5.6.0 through 5.6.2, update to a version above 5.6.2 to resolve the issue. As a temporary workaround, consider restricting access to the fnsysctl CLI command for admin users with super admin privileges until a patch is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-7738

Produtos afetados

Fortios

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-7738 · Nota de Segurança
• https://fortiguard.com/advisory/FG-IR-17-172 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-7738 · Aviso do Fabricante
• http://securityfocus.com/bid/102151 · Nota