SB2018062912 - Multiple vulnerabilities in Fortinet FortiManager and FortiAnalyzer

Description

This security bulletin contains information about 2 vulnerabilities.

1) Improper access control (CVE-ID: CVE-2018-1354)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a remote attacker to gain unauthorized access to sensitive information.

The vulnerability exists due to improper access restrictions that allows a regular user edit the avatar picture of other users with arbitrary content.

2) Open redirect (CVE-ID: CVE-2018-1355)

CWE-ID: CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a remote unauthenticated attacker to redirect the target user to external websites.

The weakness exists due to open redirect. A remote attacker can cause the target user that is using the FortiView feature to convert an HTML table to a PDF document to include arbitrary URLs in the PDF document

Remediation

Install update from vendor's website.

References

• https://fortiguard.com/psirt/FG-IR-18-014
• https://fortiguard.com/psirt/FG-IR-18-022