PT-2023-6004 · Fortinet · Fortios

Published 2023-10-10 · Updated 2023-10-12 · CVE-2023-37935

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions 7.0.0 through 7.0.12 Fortinet FortiOS versions 7.2.0 through 7.2.5 Fortinet FortiOS version 7.4.0

Description The issue is related to the use of the GET request method with sensitive query strings in Fortinet FortiOS, allowing an attacker to view plaintext passwords of remote services such as RDP or VNC if they can read the GET requests to those services. This can occur if the attacker has access to logs, referers, caches, etc.

Recommendations For Fortinet FortiOS versions 7.0.0 through 7.0.12, consider disabling the use of GET requests with sensitive query strings until a patch is available. For Fortinet FortiOS versions 7.2.0 through 7.2.5, restrict access to the FortiOS SSL VPN component to minimize the risk of exploitation. For Fortinet FortiOS version 7.4.0, avoid using sensitive query strings in GET requests to remote services until the issue is resolved. As a temporary workaround, consider restricting access to logs, referers, and caches that may contain sensitive information.

Fix

Weakness Enumeration

CWE-598

Related Identifiers

BDU:2023-06705

CVE-2023-37935

Affected Products

Fortios

References · 5

• https://bdu.fstec.ru/vul/2023-06705 · Security Note
• https://osv.dev/vulnerability/CVE-2023-37935 · Vendor Advisory
• https://fortiguard.com/psirt/FG-IR-23-120 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-37935 · Security Note
• https://t.me/cibsecurity/71961 · Telegram Post