PT-2018-1709 · Fortinet · Fortios

Publicado 2018-05-07 · Atualizado 2018-08-27 · CVE-2018-9185

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.0.0 and below

Description: An information disclosure issue in FortiOS reveals a user's web portal login credentials in a Javascript file sent to the client-side when pages bookmarked in the web portal use the Single Sign-On feature. This could potentially allow a remote attacker to disclose user credentials if additional vulnerabilities, such as session handling, access control, or cross-site scripting issues, are discovered in the SSL-VPN web portal or in the applications within, or in case of client-side vulnerabilities, in the user's browser.

Recommendations: For FortiOS versions 6.0.0 and below, consider disabling the Single Sign-On feature in the web portal as a temporary workaround until a patch is available. Restrict access to the SSL-VPN web portal to minimize the risk of exploitation. Avoid using the bookmark feature in the web portal for pages that use Single Sign-On until the issue is resolved.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2018-01275

CVE-2018-9185

Produtos afetados

Fortios

Referências · 8

• https://bdu.fstec.ru/vul/2018-01275 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-9185 · Nota de Segurança
• https://fortiguard.com/psirt/FG-IR-18-027 · Nota
• http://securitytracker.com/id/1041186 · Nota
• https://fortiguard.com/advisory/FG-IR-18-027 · Aviso do Fabricante
• http://securityfocus.com/bid/104535 · Nota
• https://osv.dev/vulnerability/CVE-2018-9185 · Aviso do Fabricante
• https://securityfocus.com/bid/104535 · Nota