Critical Authentication Bypass Vulnerability in Fortinet Products

What changed

Fortinet has disclosed a significant vulnerability affecting its FortiOS and FortiProxy products. This flaw, categorized as an Authentication Bypass Using an Alternate Path or Channel [CWE-288], enables remote attackers to exploit crafted requests to the Node.js websocket module, potentially granting them super-admin access.

The affected versions include FortiOS from 7.0.0 to 7.0.16 and FortiProxy from 7.0.0 to 7.0.19 and 7.2.0 to 7.2.12.

Who is affected

Organizations utilizing Fortinet's FortiOS and FortiProxy products are at risk due to this vulnerability. The following are particularly impacted:

Companies relying on these systems for network security and management may face significant threats if they do not address this vulnerability promptly.

• FortiOS versions 7.0.0 to 7.0.16
• FortiProxy versions 7.0.0 to 7.0.19 and 7.2.0 to 7.2.12
• Organizations using Fortinet for network security
• IT departments managing Fortinet products

What to do

It is crucial for affected users to take immediate action to mitigate the risks associated with this vulnerability. Fortinet recommends upgrading to the latest versions of FortiOS and FortiProxy to ensure security.

Regularly monitoring security advisories from Fortinet and applying patches as they become available will help maintain the integrity of your systems.

• Upgrade to the latest FortiOS and FortiProxy versions.
• Implement additional security measures to monitor for unauthorized access.
• Stay informed about updates from Fortinet regarding this vulnerability.