Vulnerability

CERT-In Vulnerability Note CIVN-2024-0347
Multiple Vulnerabilities in Fortinet Products

Original Issue Date:November 25, 2024

Severity Rating: HIGH

Software Affected

FortiAnalyzer version 7.4 and below
FortiAnalyzer-BigData version 7.4 and below
FortiManager version 7.4 and below
FortiOS version 7.4 and below

Overview

Multiple vulnerabilities have been reported in Fortinet products, which could be exploited by a remote attacker to bypass security restrictions or execute unauthorized commands on a targeted system.

Target Audience:
All organizations and individuals using Fortinet products.

Risk Assessment;
High risk of arbitrary command execution potentially leading to complete system compromise.

Impact Assessment:
Potential for compromise of complete system compromise.

Description

Fortinet is a global cybersecurity company that provides network security solutions, including firewalls, VPNs, and intrusion prevention systems.

FortiAnalyzer and FortiAnalyzer-BigData are centralized logging and analytics platforms, FortiManager is a management solution for Fortinet devices and FortiOS is an operating system used on FortiGate hardware such as firewalls.

1. Security Restrictions Bypass Vulnerability ( CVE-2024-23666 )

This vulnerability exists in Fortinet FortiAnalyzer, FortiAnalyzer-BigData and FortiManager due to client-side enforcement of server-side security. An attacker with low privileges could exploit this vulnerability by sending a specially crafted request.
Successful exploitation of this vulnerability could allow the attacker to execute sensitive operations on the system.

2. Session Fixation Vulnerability ( CVE-2023-50176 )

This vulnerability exists in Fortinet FortiOS. An attacker could exploit this vulnerability by enticing a user to click on a SAML authentication phishing link.
Successful exploitation of this vulnerability could allow the attacker to gain access to another user�s session and execute unauthorized commands on the system.

Solution

Apply appropriate updates as mentioned in:
https://fortiguard.fortinet.com/psirt/FG-IR-23-396

https://fortiguard.fortinet.com/psirt/FG-IR-23-475

Vendor Information

Fortinet
https://fortiguard.fortinet.com/psirt/FG-IR-23-396
https://fortiguard.fortinet.com/psirt/FG-IR-23-475

CVE Name
CVE-2024-23666
CVE-2023-50176

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-22902657

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India