Fortinet Command Injection Vulnerability

Fortinet Command Injection Vulnerability

An authenticated attacker could execute arbitrary commands as the root user on the underlying system via the SAML server configuration page. The vulnerability impacts Fortinet FortiWeb versions 6.3.11 and earlier, an authenticated…
FortiWeb WAF Flaw

FortiWeb WAF Flaw

Fortinet has recently found a high-severity vulnerability (CVE-2021-22123) affecting its FortiWeb WAF, a remote, authenticated attacker can exploit it to execute arbitrary commands via the SAML server configuration page. An…
APT Hits FortiOS

APT Hits FortiOS

The FBI and the CISA are warning that APT nation-state actors are actively exploiting known security vulnerabilities in the Fortinet FortiOS cybersecurity operating system, affecting the company’s SSL VPN products.…
FortiNet Vulnerability

FortiNet Vulnerability

Fortinet has addressed four vulnerabilities in FortiWeb web application firewalls The first vulnerability, tracked as CVE-2020-29015, is a blind SQL injection that resides in the FortiWeb user interface. The flaw could be exploited…
FortiNet WAF Vulnerability

FortiNet WAF Vulnerability

Researchers found multiple serious vulnerabilities in Fortinet’s FortiWeb web application firewall (WAF) that could be exploited by attackers to hack into corporate networks. The flaws, tracked as CVE-2020-29015, CVE-2020-29016, CVE-2020-29018,…