Fortinet Firewall, Web Apps Hit by Security Flaw

Threat researchers at Optimistic Technologies have found four security vulnerabilities affecting Fortinet's FortiWeb firewalls and web applications and are urging customers to upgrade their installations as soon as possible.

The first of these vulnerabilities (CVE-2020-29015) earned a severity score of 6.4 and enabled an unauthorized user to conduct a blind SQL database injection attack via the FortiWeb interface. Once exploited, the attacker will send a request with an authorization header containing malicious SQL commands, Positive Technology wrote in a blog post last week.

The second (CVE-2020-29016) and third (CVE-2020-29019) vulnerabilities also earned a severity score of 6.4 and allowed researchers to launch a stack buffer overflow attack on the FortiWeb server, allowing them to run unauthorized code and conduct a denial-of-service attack on the httpd daemon program.

The final vulnerability (CVE-2020-29018) earned a slightly lower threat score of 5.3 and allowed a format-string exploit. Researchers claim that if abused, an attacker will read the contents of the device's memory, obtain confidential data, and execute unauthorized code using the "redir" parameter.

According to Andrey Medov, a threat researcher at Positive Technologies, the first two vulnerabilities are especially powerful as they do not require permission to exploit them.

"The first one allows you to get the system administrator account hash due to excessive [database management system] user privileges that give you access to the API without decrypting the hash value," he wrote. "The second one allows for arbitrary code execution."

Medov added that although the fourth vulnerability still allowed unauthorized code to be run, it was less serious as the exploit involved authentication. 

Fortinet was made aware of these vulnerabilities at the beginning of January and has since been patched by the business. Fortinet advises customers to upgrade FortiWeb versions 6.2 and 6.3 to 6.3.8 and 6.2.4, respectively, to apply patches.

81 comments

  1. slonned
  2. slonned
  3. slonned
  4. slonned
  5. slonned
  6. slonned
  7. Izdwcl

    Yjwpsn - over the counter ed pills Gizhgb

  8. Lhuexi

    priligy 30mg pills - priligyp sky pharmacy

  9. Xsdcoa

    purchase prednisone online - prednisone 59 mg where can i buy prednisone without prescription

  10. Bphyle

    getting a provigil prescription - provilgil modafinil alternatives

  11. Njaduz

    accutane canada pharmacy - pharmacy accutane accutane where to get

  12. Upirxm

    where to buy amoxicilin - buy amoxicilin 500 mg canada cvs amoxicillin price no insurance

  13. Rqnyoj

    buy vardenafil at walmart - buy vardenafil australia vardenafil 20 mg

  14. Hzjgsn

    ivermectin australia - stromectol for human stromectol price in india

  15. Rjvrhw

    generic cialis mexico - best canadian online pharmacy cialis generic cialis 5mg canada

  16. Yhxnno

    ivermectin 1 - ivermectin 50ml ivermectin 50ml

  17. Eqwugd

    accutane cost in canada - accutane 40 mg accutane us

  18. Bzwokm

    lyrica 25mg price - lyrica pills for sale canadian pharmacy meds review

  19. Wccqsp

    amoxicillin without a doctor - amoxil 250 antibiotics without a doctor's prescription

  20. Atnofl

    where can i buy viagra uk - female viagra drugstore viagra for women

  21. Sfcwhh

    tadalafil 25mg - mail order pharmacy india pharmacy cialis

  22. slonned
  23. Fkzkey

    purchase ivermectin - stromectol tablets for humans for sale where to buy stromectol online

  24. Zskowc

    prednisone 20mg cheap - deltasone price prednisone online canada

  25. Zyzcqn

    provigil dosage - modafinil side effects generic modafinil

  26. Williamsmesk

    free local personals
    [url="http://onlinedatinglook.com/?"]free local dating sites no fees[/url]

  27. Kknavo

    zithromax 500mg pills - zithromax pfizer azithromycin dosage

  28. Svwzat

    order furosemide online - furosemide on line lasix online

  29. Dllbrs

    clomid generic - generic clomid where can i buy clomid

  30. Qkxhvg

    cheapest sildenafil 50 mg - viagra india generic order sildenafil 20 mg

  31. Xrthgx

    cialis mail order - tadalafil 2.5 mg price legit online pharmacy

  32. Bxepqs

    covid ivermectin - stromectol pharmacy ivermectin cream 5%

  33. Flkqwa

    casinos online - real money casino app online casinos usa

  34. KevinLig

    omar mateen gay dating profile
    gay dating magazines
    [url="http://gaydatingzz.com?"]is bumble good for gay dating[/url]

  35. Xepvvm

    erectile dysfunction causes - top ed drugs cheap ed pills

  36. Gsuujp

    deltasone without script online - prednisone 20mg tablets prednisone drops after cataract surgery

  37. KevinLig

    the gay dating line "976-4297"
    free gay men dating websites
    [url="http://gaychatus.com?"]best dating website for gay[/url]

  38. Puzekw

    sildenafil 25 mg price in india - viagra price in india online real viagra online usa

  39. Lqggiy

    cialis for daily use best price - Buy cialis online cheap cialis 2.5 daily

  40. KevinLig

    gay furry dating
    modern gay dating site
    [url="http://freegaychatnew.com?"]lads gay dating[/url]

  41. Fnxgyc

    stromectol 6 mg - stromectol medication stromectol uk buy

  42. Azvpjc

    buy erectile dysfunction pills - canadian medications gnc ed pills

  43. Knvzng

    ventolin cost australia - ventolin pills ventolin price uk

  44. Ivswgp

    cytotec para abortar - cytotec online cost of cytotec tablet

  45. Ziwncz

    doxycycline 50 mg - doxycycline 40 mg generic cost doxycycline 400 mg brand name

  46. Teasga

    neurontin 600 - neurontin 100mg capsule price levothyroxine united states

  47. Yxdrig

    price of viagra 100mg uk - viagra for sale us cheap viagra for women

  48. Lorraine

    Great beat ! I would like to apprentice while you amend your website, how can i
    subscribe for a blog site? The account aided me a acceptable deal.
    I had been a little bit acquainted of this web hosting your broadcast provided bright clear
    concept

  49. Bhzmkp

    best tadalafil tablets in india - cialis online canada cheap 20mg cialis

  50. Willian

    Hi, I do believe this is an excellent web site. I stumbledupon it
    😉 I will return yet again since i have book-marked it.
    Money and freedom is the greatest way to change, may you be rich and continue to help others.

    Also visit my site; off quest bars; t.co,

  51. replicamagic.co

    i actually love blog post

    https://www.replicamagic.co/

  52. Hwmsjm

    cheapest generic vardenafil online - buy vardenafil overnight shipping levitra 20mg

  53. Fanny

    I think the admin of this quest bars - http://t.co/NMmJ0IfVIL, site is actually working hard for his
    web site, because here every data is quality
    based information.

  54. Rwuaqg

    ivermectin topical - buy ivermectin stromectol

  55. Jonathan

    I've been exploring for a little for any high-quality articles
    or blog posts in this kind of space . Exploring in Yahoo I eventually stumbled
    upon this web site. Studying this information So i am glad to express that I have scoliosis surgery an incredibly
    excellent uncanny feeling I came upon exactly what I needed.

    I such a lot undoubtedly will make certain to do not forget this site and provides it a glance regularly.

  56. Sterling

    Greetings! I know this is kinda off topic but
    I was wondering which blog platform are you using for this website?
    I'm getting fed up of Wordpress because I've had issues with asmr [http://bit.ly/] hackers and I'm looking
    at alternatives for another platform. I would be great if you could point me in the direction of a good platform.

  57. Bmvbdq

    canada pharmacy prednisone - buy prednisone online australia prednisone corticosteroids

  58. Boyce

    Your style is very unique compared to other people I've read stuff from.
    I appreciate you for posting when you have the opportunity,
    Guess I'll just book mark this blog.

    My web blog - and asmr

  59. Vzzvzt

    accutane order - accutane generic cost accutane medication price

  60. PatrickSix

    gay dating us
    gay speed dating in nyc
    [url="http://gaychatgay.com?"]gay dating sims steam[/url]

  61. Jodi

    Pretty! This was an incredibly wonderful post.
    Many thanks for providing these details.

    Here is my page :: asmr that - bit.ly,

  62. Divdee

    amoxil 500mg - buy amoxicilina 500 mg amoxicillin for sale for humans

  63. Abdul

    We are a group of volunteers and opening a new scheme in our community.
    Your website offered us with valuable information to work on. You've done a
    formidable job and our whole community will be grateful to you.

    Feel free to visit my homepage; asmr this

  64. Milla

    Great goods from you, man. I have consider your stuff prior to and you're just extremely great.
    I actually like what you've bought here, really like what you are
    stating and the best way in which you assert it. You make it
    enjoyable and you continue to care for to keep it smart.
    I can't wait to learn far more from you. That is really a
    terrific site.

    my web-site - scoliosis surgery why

  65. Zhlgir

    college essay writing help - essay help writing academic writing support

  66. Mcukgw

    where can i buy viagra tablets - Cost viagra sildenafil generic usa

  67. Henrybrura

    latin gay men dating
    dating a gay man of color
    [url="http://gaydatinglosangeles.com?"]non hookup gay dating sites[/url]

  68. Wjycns

    generic cialis 20mg online - Cialis on sale how to buy cialis in canada

  69. Btcvok

    prednisone 5 mg buy online - can i purchase prednisone without a prescription buy prednisone with paypal

  70. Henrybrura

    gay dating site adam and adam
    tips for online dating gay
    [url="http://gayonlinedating.net/?"]indian gay dating[/url]

  71. Bcbjkf

    furosemide order online - buy lasix 100 mg furosemide in mexico

  72. Xylqim

    ventolin price in india - albuterol without prescription ventolin australia price

  73. Xrqirt

    cytotec for sale usa - cytotec 100 mcg tablet cytotec pill

  74. Itvpdk

    doxycycline prescription discount - prednisolone 0.5 cream prednisolone buy online uk

  75. Ddlkzz

    stromectol pills canada - stromectol us stromectol 3 mg dosage

  76. Ckqpbq

    ivermectin 18mg - ivermectin cost in usa ivermectin 500mg

  77. Mudqyk

    what is sildenafil - sildenafil pill sildenafil canada

  78. Qrbcxc

    buy tadalafil generic online - tadalafil reviews tadalafil 20mg

  79. Lqxddr

    buy accutane 10mg online - accutane cheapest price accutane oral

  80. Wwrkse

    letter writing services - buy dissertation online essay buy online

  81. Yecotf

    ivermectin dosage - stromectol price comparison ivermectin 12mg online

Comment

Your email address will not be disclosed. The required fields are marked with*.

Related recommendation

No related articles!

微信扫一扫,分享到朋友圈

Fortinet Firewall, Web Apps Hit by Security Flaw