FG-IR-25-934: SSL-VPN Symlink Persistence Patch Bypass
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] in FortiOS SSL-VPN may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via another vulnerability, at filesystem level.
Affected Software
Event History
Frequently Asked Questions
What is the severity of FG-IR-25-934?
The severity of FG-IR-25-934 is classified as high due to the potential for unauthorized access to sensitive information.
How do I fix FG-IR-25-934?
To fix FG-IR-25-934, upgrade to FortiOS version 7.6.2 or 7.4.7 depending on your currently installed version.
Who is affected by FG-IR-25-934?
FG-IR-25-934 affects multiple versions of FortiOS, specifically versions 6.4 and earlier, and certain 7.x versions before the patch.
What does FG-IR-25-934 expose?
FG-IR-25-934 exposes sensitive information to unauthorized actors due to a vulnerability in the SSL-VPN patch.
Can FG-IR-25-934 be exploited remotely?
Yes, FG-IR-25-934 can be exploited remotely by an unauthenticated attacker.