A Host Header Redirection vulnerability exists in FortiOS SSL-VPN web portal: when an attacker submits specially crafted HTTP requests, the SSL-VPN web portal may respond with a redirection to websites specified by the attacker. If a web proxy’s cache is poisoned with the aforementioned redirection, users of this web proxy may be directed to the …
Two improper access control vulnerabilities in FortiMail admin webUI may allow administrators to perform privileged functions they should not be authorized for. Specifically, the two vulnerabilities are identified as the following: CVE-2019-15712: improper access control to web console CVE-2019-15707: improper access control to system backup config download Impact: Improper Access Control Affected Products: FortiMail 6.2.0, …
Multiple vulnerabilities, referred to as Dragonblood, exist in WiFi WPA3 standard implementation . Dragonblood vulnerabilities impacting WiFi WPA3 standard implementations can cause password leak, denial of service or authorization bypass. They consist it: CVE-2019-9494: SAE cache attack against ECC groups (SAE side-channel attacks) CVE-2019-9495: EAP-PWD cache attack against ECC groups (EAP-PWD side-channel attack) CVE-2019-9496: SAE …
Cisco has released security updates to address vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.TT-CSIRT encourages users and administrators to review the Cisco Released and apply the necessary updates: Critical vulnerability: CVE-2019-15975-Cisco Data Center Network Manager Authentication Bypass https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-auth-bypass High-level vulnerabilities: CVE-2019-15984-Cisco …