تحديثات Fortinet
1775تاريخ التحذير
مستوى الخطورة
رقم التحذير
القطاع المستهدف
5 أغسطس, 2021
● عالي
2021-3310
الكل
الوصف:
أصدرت Fortinet عدّة تحديثات لمعالجة عددٍ من الثغرات في منتجاتها، من أبرزها:
- FortiSandbox 3.2.1 and below.
- FortiSandbox 3.1.4 and below.
- FortiSandbox 3.0.6 and below.
- FortiAuthenticator 6.0.5 and below.
- FortiAuthenticator 5.5.0 and below.
- FortiAuthenticator 5.4.1 and below.
- FortiAuthenticator 5.3.1 and below.
- FortiAuthenticator 5.2.2 and below.
- FortiAuthenticator 5.1.2 and below.
- FortiAuthenticator 5.0.0 and below.
- FortiAuthenticator 4.3.4 and below.
- FortiManager versions 5.6.10 and below.
- FortiManager versions 6.0.10 and below.
- FortiManager versions 6.2.7 and below.
- FortiManager versions 6.4.5 and below.
- FortiManager version 7.0.0.
- FortiManager versions 5.4.x.
- FortiAnalyzer versions 5.6.10 and below.
- FortiAnalyzer versions 6.0.10 and below.
- FortiAnalyzer versions 6.2.7 and below.
- FortiAnalyzer versions 6.4.5 and below.
- FortiAnalyzer version 7.0.0.
- FortiSandbox 3.2.2 and below.
- FortiManager versions 5.6.x, 6.2.x and 6.0.x are also impacted.
- FortiAnalyzer versions 5.6.x, 6.2.x and 6.0.x also are impacted.
- FortiPortal version 5.2.5 and below.
- FortiPortal version 5.3.5 and below.
- FortiPortal version 6.0.4 and below.
التهديدات:
يمكن للمهاجم استغلال الثغرات وتنفيذ ما يلي:
- رفع الصلاحيات لزيادة قدرته على التعديل في النظام
- هجمة حجب الخدمة (DoS attack)
الإجراءات الوقائية:
يوصي المركز بتحديث النسخ المتأثرة، حيث أصدرت Fortinet توضيحًا لهذه التحديثات:
- https://www.fortiguard.com/psirt/FG-IR-21-063
- https://www.fortiguard.com/psirt/FG-IR-21-059
- https://www.fortiguard.com/psirt/FG-IR-21-050
- https://www.fortiguard.com/psirt/FG-IR-21-054
- https://www.fortiguard.com/psirt/FG-IR-21-037
- https://www.fortiguard.com/psirt/FG-IR-20-061
- https://www.fortiguard.com/psirt/FG-IR-21-046
- https://www.fortiguard.com/psirt/FG-IR-19-301
- https://www.fortiguard.com/psirt/FG-IR-21-085
- https://www.fortiguard.com/psirt/FG-IR-21-092
- https://www.fortiguard.com/psirt/FG-IR-21-094
- https://www.fortiguard.com/psirt/FG-IR-20-066
- https://www.fortiguard.com/psirt/FG-IR-20-209
- https://www.fortiguard.com/psirt/FG-IR-20-188
- https://www.fortiguard.com/psirt/FG-IR-20-202
- https://www.fortiguard.com/psirt/FG-IR-20-218
- https://www.fortiguard.com/psirt/FG-IR-20-071
- https://www.fortiguard.com/psirt/FG-IR-20-170
- https://www.fortiguard.com/psirt/FG-IR-21-067