Cyber Security News

Fortinet Patches Critical Flaws That Affected Multiple Products

Fortinet, a leading cybersecurity provider, has issued patches for several critical vulnerabilities impacting multiple products, including FortiAnalyzer, FortiClient, FortiManager, and FortiOS.

These vulnerabilities could allow attackers to perform unauthorized operations, escalate privileges, or hijack user sessions. Below are detailed descriptions of the key vulnerabilities, their impact, and the recommended fixes.

1. Read-Only Users Could Run Sensitive Operations – CVE-2024-23666

Client-side enforcement of server-side security vulnerability (CWE-602) in FortiAnalyzer may allow authenticated attackers with read-only permissions to execute sensitive operations by sending crafted requests.

Free Ultimate Continuous Security Monitoring Guide - Download Here (PDF)

This vulnerability is especially concerning as it could provide unauthorized users with access to privileged actions. Affected Products and Versions:

ProductAffected VersionsSolution
FortiAnalyzer 7.47.4.0 through 7.4.1Upgrade to 7.4.3 or above
FortiAnalyzer 7.27.2.0 through 7.2.4Upgrade to 7.2.6 or above
FortiAnalyzer 7.07.0.0 through 7.0.11Upgrade to 7.0.13 or above
FortiAnalyzer 6.46.4.0 through 6.4.14Upgrade to 6.4.15 or above
FortiAnalyzer-BigData 7.47.4.0Upgrade to 7.4.1 or above
FortiAnalyzer-BigData 7.27.2.0 through 7.2.6Upgrade to 7.2.7 or above
FortiAnalyzer-BigData 7.07.0 all versionsMigrate to a fixed release
FortiAnalyzer-BigData 6.46.4 all versionsMigrate to a fixed release
FortiAnalyzer-BigData 6.26.2 all versionsMigrate to a fixed release
FortiManager 7.47.4.0 through 7.4.1Upgrade to 7.4.3 or above
FortiManager 7.27.2.0 through 7.2.4Upgrade to 7.2.6 or above
FortiManager 7.07.0.0 through 7.0.11Upgrade to 7.0.13 or above
FortiManager 6.46.4.0 through 6.4.14Upgrade to 6.4.15 or above

2. Privilege Escalation via Lua Auto Patch Function – CVE-2024-36513

A privilege context switching error vulnerability (CWE-270) in FortiClient Windows could enable an authenticated user to escalate their privileges by exploiting the lua auto patch scripts.

This vulnerability can lead to unauthorized actions and potentially full system compromise. Affected Products and Versions:

ProductAffected VersionsSolution
FortiClient Windows 7.4Not affectedNot Applicable
FortiClient Windows 7.27.2.0 through 7.2.4Upgrade to 7.2.5 or above
FortiClient Windows 7.07.0.0 through 7.0.12Upgrade to 7.0.13 or above
FortiClient Windows 6.46.4.0 through 6.4.10Migrate to a fixed release

3. FortiOS – SSLVPN Session Hijacking Using SAML Authentication – CVE-2023-50176

A session fixation vulnerability (CWE-384) in FortiOS may allow attackers to hijack user sessions via phishing attempts exploiting the SAML authentication mechanism.

This vulnerability can lead to unauthorized code execution or command execution by hijacking SSL-VPN sessions. Affected Products and Versions:

ProductAffected VersionsSolution
FortiOS 7.47.4.0 through 7.4.3Upgrade to 7.4.4 or above
FortiOS 7.27.2.0 through 7.2.7Upgrade to 7.2.8 or above
FortiOS 7.07.0.0 through 7.0.13Upgrade to 7.0.14 or above

4. Named Pipes Improper Access Control – CVE-2024-47574

An authentication bypass using an alternate path (CWE-288) in FortiClient (Windows) allows low-privilege attackers to execute arbitrary code with high privileges by sending spoofed named pipe messages. Affected Products and Versions:

ProductAffected VersionsSolution
FortiClient Windows 7.47.4.0Upgrade to 7.4.1 or above
FortiClient Windows 7.27.2.0 through 7.2.4Upgrade to 7.2.5 or above
FortiClient Windows 7.07.0.0 through 7.0.12Upgrade to 7.0.13 or above
FortiClient Windows 6.46.4 all versionsMigrate to a fixed release

Fortinet has responded swiftly to these critical vulnerabilities by releasing patches and providing upgrade paths for affected products.

All users are strongly advised to update their systems to the recommended versions to mitigate the risks associated with these vulnerabilities.

Fortinet continues to prioritize security and proactively works with researchers to address vulnerabilities under responsible disclosure frameworks.

Run private, Real-time Malware Analysis in both Windows & Linux VMs. Get a 14-day free trial with ANY.RUN!



Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Google Unveils New Intelligent, Real-Time Protections for Android Users

Google has once again raised the bar for mobile security by introducing two new AI-powered…

2 hours ago

Chinese National Faces 20 Years of Jail Time for Laundering Millions in Crypto

Daren Li, 41, a dual citizen of China and St. Kitts and Nevis, and a…

2 hours ago

Google to Issue CVEs for Critical Cloud Vulnerabilities

Google Cloud has announced a significant step forward in its commitment to transparency and security…

4 hours ago

GitLab Patches Critical Flaws Leads to Unauthorized Access to Kubernetes Cluster

GitLab has rolled out critical security updates to address multiple vulnerabilities in its Community Edition…

5 hours ago

Windows 0-Day Exploited in Wild with Single Right Click

A newly discovered zero-day vulnerability, CVE-2024-43451, has been actively exploited in the wild, targeting Windows systems…

6 hours ago

Automating Identity and Access Management for Modern Enterprises

Keeping track of who has access and managing their permissions has gotten a lot more…

22 hours ago