Fortinet Fortigate Firewall contains a flaw that potentially allows a remote attacker to gain the administrator credentials. The issue is due to the session cookie containing both the username and MD5 hash of the password. In conjunction with the XSS attacks, a remote attacker could trick the administrator into disclosing the contents of the cookie.
Classification
Location:
Remote / Network Access
Attack Type:
Information Disclosure
Impact:
Loss of Confidentiality
Exploit:
Exploit Public
Solution
Upgrade to version 2.50 MR5 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
hartsuijker.com -