Fortinet Releases Security Updates for Multiple Products | CISA
Fortinet has released security updates to address vulnerabilities in multiple products, including FortiOS. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.
CISA encourages users and administrators to review the following advisories and apply necessary updates:
- FG-IR-23-396 ReadOnly Users Could Run Some Sensitive Operations
- FG-IR-23-475 FortiOS – SSLVPN Session Hijacking Using SAML Authentication
- FG-IR-24-144 Privilege Escalation via Lua Auto Patch Function
- FG-IR-24-199 Named Pipes Improper Access Control
Source link
lol
Fortinet has released security updates to address vulnerabilities in multiple products, including FortiOS. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply necessary updates: FG-IR-23-396 ReadOnly Users Could Run Some Sensitive Operations FG-IR-23-475 FortiOS –…