InfoSecBulletin Cybersecurity for mankind
Fortinet has fixed vulnerabilities in its products FortiOS, FortiProxy, FortiPAM, FortiSwitchManager, FortiManager, and FortiAnalyzer. The vulnerabilities could be used to gain unauthorized access and increase privileges, posing a major threat to affected systems.
Vulnerability Details:
Xploit_Cr3w and Blind_Virus, champion for BCS CTF contest
Salt Typhoon Exploits Vulnerable Cisco Devices of Telcoms Globally
CISA Releases Advisories For 20 Industrial Control Systems (ICS)
“Astaroth” Phishing Kit Bypasses 2FA Of Gmail, Yahoo, AOL, M365
CVE-2023-38831
Malware campaign target Bangladeshi Government Entities: Report
(CVE-2025-1146
CrowdStrike Fixed High-Severity TLS Vuln in Falcon Sensor
CVE-2025-0108 & CVE-2025-0110
Palo Alto Networks Addressed High-Severity PAN-OS Vulns
Update Now
Ivanti Patches 3 Critical Flaws in Connect Secure and Policy Secure
This Adtech Company is Powering Surveillance of U.S. Military Personnel
Intel Patched 374 Vulnerabilities in multiple products
CVE-2022-45862
The graphical user interface (GUI) of FortiOS, FortiProxy, FortiPAM, and FortiSwitchManager was identified as having an insufficient session expiration vulnerability (CWE-613).
Attackers could exploit this flaw to reuse web sessions even if a user has logged out, as long as they have the required credentials.
The vulnerability has a CVSSv3 score of 3.5, indicating a medium severity level due to improper access control. Affected products and their solutions include:
FortiOS:
Versions 7.2.0 to 7.2.5 need to be upgraded to 7.2.6 or a higher version. Both versions 7.0 and 6.4 are affected and require a migration to a fixed release.
FortiPAM:
All versions from 1.0 to 1.3 are affected and require migration to a fixed release.
FortiProxy:
All versions of 7.2 and 7.0 are affected and need migration to a fixed release.
FortiSwitchManager:
Versions 7.2.0 to 7.2.1 are impacted and need to be updated to 7.2.2 or higher.
CVE-2024-21757
A vulnerability (CWE-620) was found in FortiManager and FortiAnalyzer that could allow a read-write user to change admin passwords through device configuration backup, potentially leading to privilege escalation.
The vulnerability carries a CVSSv3 score of 5.5. Affected versions and solutions are:
FortiAnalyzer:
Version 7.4.0 through 7.4.1 should be upgraded to 7.4.2 or later, and versions 7.2.0 through 7.2.4 should be upgraded to 7.2.5 or later.
FortiManager:
“For versions 7.4.0 through 7.4.1, upgrade to 7.4.2 or higher. For versions 7.2.0 through 7.2.4, upgrade to 7.2.5 or higher.”
CVE-2024-36505:
There’s a security issue in FortiOS (CWE-284) that allows a person with write access to get around the file integrity checking system. Its CVSSv3 score is 4.7. The affected versions that need updates are:
FortiOS:
Versions 7.4.0 – 7.4.3 should be updated to 7.4.4 or higher, versions 7.2.5 – 7.2.7 should be updated to 7.2.8 or higher, and versions 7.0.12 – 7.0.14 should be updated to 7.0.15 or higher.
Fortinet has not reported any attacks using these vulnerabilities. Fortinet recommends applying updates to protect against vulnerabilities and maintain system security. This is important to prevent exploitation by cyber threats.
