CVE-2024-55591 FortiOS和FortiProxy存在身份验证绕过漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-55591
• https://www.fortiguard.com/psirt/FG-IR-24-535
• https://github.com/watchtowrlabs/fortios-auth-bypass-poc-CVE-2024-55591
• https://arcticwolf.com/resources/blog/cve-2024-55591/
• https://www.truesec.com/hub/blog/fortinet-bypass-vulnerability-cve-2024-55591-exploited
• https://www.cve.org/CVERecord?id=CVE-2024-55591
• https://www.tenable.com/cve/CVE-2024-55591
• https://www.sentinelone.com/vulnerability-database/cve-2024-55591/
• https://github.com/watchtowrlabs/fortios-auth-bypass-check-CVE-2024-55591

Related Vulnerabilities

• PoCCVE-2019-5591: FortiOS - Insecure LDAP Configuration Detection
• Fortinet FortiOS等 签名验证不当漏洞
• PoCCVE-2015-1880: Fortinet FortiOS <=5.2.3 - Cross-Site Scripting
• PoCCVE-2016-3978: Fortinet FortiOS - Open Redirect/Cross-Site Scripting
• PoCCVE-2017-14186: FortiGate FortiOS SSL VPN Web Portal - Cross-Site Scripting
• PoCCVE-2017-3131: FortiOS 5.4.0 to 5.6.0 - Cross-Site Scripting
• PoCCVE-2017-3132: Fortinet FortiOS < 5.6.0 - Cross-Site Scripting
• PoCCVE-2017-3133: Fortinet FortiOS < 5.6.0 - Cross-Site Scripting
• PoCCVE-2018-13379: Fortinet FortiOS - Credentials Disclosure
• PoCCVE-2018-13380: Fortinet FortiOS - Cross-Site Scripting
• PoCCVE-2024-55591: Fortinet - Authentication Bypass