FortiAuthenticatorの脆弱性2件、認証回避の修正版あり
Summary
FortiAuthenticatorの8.0系と6.6系に、認証を回避して不正アクセスを許す重大な脆弱性が2件公表されました。社内の認証基盤として使っている組織は、版を確認して修正版への更新を進めてください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
FortiAuthenticatorの8.0系と6.6系に、認証を回避して不正アクセスを許す重大な脆弱性が2件公表されました。社内の認証基盤として使っている組織は、版を確認して修正版への更新を進めてください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| FortinetFortiAuthenticator |
8.0.0 – 8.0.3→ Not listed 6.6.0 – 6.6.10→ Not listed |
Not listed Not listed |
This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.
Original description The description as published by the source.
A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an attacker to bypass authentication and gain unauthorized access.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web fortiguard.fortinet.com
- web nvd.nist.gov
- web github.com