Rewterz Threat Advisory – Multiple Fortinet FortiManager and FortiAnalyzer Vulnerabilities

Rewterz Threat Advisory – Multiple Google Chrome Vulnerabilities

November 1, 2023

Rewterz Threat Alert – A New PikaBot Malware – Active IOCs

November 1, 2023

Rewterz Threat Advisory – Multiple Fortinet FortiManager and FortiAnalyzer Vulnerabilities

Severity

High

Analysis Summary

CVE-2023-44249 CVSS:4.3

Fortinet FortiManager and FortiAnalyzer could allow a remote authenticated attacker to obtain sensitive information, caused by improper authorization validaiton. By sending specially crafted HTTP requests, an attacker could exploit this vulnerability to obtain sensitive information, and use this information to launch further attacks against the affected system.

CVE-2023-41838 CVSS:7.1

Fortinet FortiAnalyzer and FortiManager could allow a local authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary commands to delete arbitrary files.

CVE-2023-42787 CVSS:6.5

Fortinet FortiManager and FortiAnalyzer could allow a remote authenticated attacker to bypass security restrictions, caused by a client-side enforcement of server-side security vulnerability. By sending a specially crafted request, an attacker could exploit this vulnerability to access a privileged web console.

CVE-2023-42782 CVSS:5.3

Fortinet FortiAnalyzer could allow a remote attacker to bypass security restrictions, caused by an insufficient verification of data authenticity vulnerability. By sending a specially crafted request, an attacker could exploit this vulnerability to send messages to the syslog server of FortiAnalyzer.

CVE-2023-42791 CVSS:8.8

Fortinet FortiManager and FortiAnalyzer could allow a remote attacker to upload arbitrary files, caused by relative path traversal vulnerability. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to upload a malicious file, which could allow the attacker to execute arbitrary code on the vulnerable system.

CVE-2023-41679 CVSS:8.5

Fortinet FortiManager could allow a remote authenticated attacker to bypass security restrictions, caused by improper access control in the management interface. By sending a specially crafted request, an attacker could exploit this vulnerability to bypass authentication and add and delete CLI script on ADOMs they are not a part of.

CVE-2023-25607 CVSS:7.8

Fortinet FortiAnalyzer, Fortinet FortiADC, and Fortinet FortiManager could allow a local authenticated attacker to execute arbitrary commands on the system, caused by an OS command injection vulnerability in the wordexp function. An attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE-2023-42788 CVSS:7.8

Fortinet FortiManager and FortiAnalyzer could allow a local authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system.