FG-IR-20-231: [FortiProxy] SSL VPN account hijack (unauthorized modification of users passwords)
An improper access control vulnerability in FortiProxy SSL VPN web portal may allow an unauthenticated and remote attacker to change local SSL-VPN users' passwords via specially crafted HTTP requests.
Affected Software
Event History
Frequently Asked Questions
What is the severity of FG-IR-20-231?
The severity of FG-IR-20-231 is classified as high due to its potential impact on user account security.
How do I fix FG-IR-20-231?
To fix FG-IR-20-231, ensure to apply the latest security patches provided by Fortinet for FortiProxy.
What kind of attack does FG-IR-20-231 allow?
FG-IR-20-231 allows unauthenticated attackers to change local SSL-VPN users' passwords through crafted HTTP requests.
Which version of FortiProxy is affected by FG-IR-20-231?
FortiProxy versions are affected by FG-IR-20-231 based on the specific configurations that allow improper access control.
What steps can I take to mitigate the risk of FG-IR-20-231?
To mitigate the risk of FG-IR-20-231, restrict access to the SSL VPN web portal and regularly monitor user activity.