PT-2013-6135 · Fortinet · Fortianalyzer

Published 2013-11-19 · Updated 2013-11-20 · CVE-2013-6826

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions prior to 5.0.5

Description The issue is related to the improper validation of the csrf token parameter in the cgi-bin/module//sysmanager/admin/SYSAdminUserDialog endpoint. This allows remote attackers to perform cross-site request forgery (CSRF) attacks. CSRF is an attack that tricks the victim into performing unintended actions on a web application that they are authenticated to.

Recommendations For versions prior to 5.0.5, update to version 5.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the cgi-bin/module//sysmanager/admin/SYSAdminUserDialog endpoint until a patch is applied. Avoid using the csrf token parameter in this endpoint until the issue is resolved.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2013-6826

Affected Products

Fortianalyzer

References · 4

• 🔥 http://packetstormsecurity.com/files/123980/fortianalyzer-xsrf.txt · Exploit
• 🔥 http://securityfocus.com/bid/63663 · Exploit
• 🔥 https://exploit-db.com/exploits/38824 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-6826 · Security Note