PT-2018-1710 · Fortinet · Fortios

Published 2018-05-17 · Updated 2018-06-27 · CVE-2017-14185

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: FortiOS versions 5.2 through 5.6.2 FortiOS versions 5.4.0 through 5.4.8

Description: The issue allows SSL VPN web portal users to access internal FortiOS configuration information, such as addresses, via specifically crafted URLs inside the SSL-VPN web portal. This is caused by errors in access restriction. Exploitation of the issue may allow a remote attacker to disclose protected information about the operating system using specially formed URI.

Recommendations: For FortiOS versions 5.2 through 5.6.2, consider restricting access to the SSL VPN web portal until a fix is available. For FortiOS versions 5.4.0 through 5.4.8, avoid using specifically crafted URLs inside the SSL-VPN web portal to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

CWE-264

Related Identifiers

BDU:2018-01276

CVE-2017-14185

Affected Products

Fortios

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2017-14185 · Security Note
• https://osv.dev/vulnerability/CVE-2017-14185 · Vendor Advisory
• https://fortiguard.com/advisory/FG-IR-17-231 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01276 · Security Note
• http://securityfocus.com/bid/104288 · Note
• https://fortiguard.com/psirt/FG-IR-17-231 · Note
• https://securityfocus.com/bid/104288 · Note