PT-2017-3711 · Fortinet · Fortios

Published 2017-10-24 · Updated 2017-10-31 · CVE-2017-7733

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: FortiOS versions 5.4.0 through 5.4.5 FortiOS version 5.6.0

Description: A Cross-Site-Scripting (XSS) vulnerability exists in the webUI "Login Disclaimer" redir parameter, allowing a remote unauthenticated attacker to execute arbitrary javascript code. The issue is caused by insufficient protection of the web page structure, potentially enabling an attacker to inject arbitrary JavaScript or HTML code using a specially crafted value of the redir parameter. This vulnerability can be exploited by sending a maliciously crafted URL to a victim with an open session on the web GUI, causing the execution of arbitrary javascript code in the security context of the victim's browser.

Recommendations: For FortiOS versions 5.4.0 through 5.4.5, consider disabling the "Login Disclaimer" feature until a patch is available. For FortiOS version 5.6.0, restrict access to the web GUI to minimize the risk of exploitation. As a temporary workaround, avoid using the redir parameter in the affected API endpoint until the issue is resolved.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2018-01281

CVE-2017-7733

Affected Products

Fortios

References · 7

• https://fortiguard.com/psirt/FG-IR-17-113 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7733 · Security Note
• https://bdu.fstec.ru/vul/2018-01281 · Security Note
• https://osv.dev/vulnerability/CVE-2017-7733 · Vendor Advisory
• http://securitytracker.com/id/1039677 · Note
• http://securityfocus.com/bid/101563 · Note
• https://securityfocus.com/bid/101563 · Note