Cybersecurity Alerts

Fortinet FortiOS and FortiProxy Improper Authorization

An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-285

References

• https://nvd.nist.gov/vuln/detail/CVE-2018-13382