Fortinet FortiOS and FortiProxy Improper Authorization
Fortinet · FortiOS and FortiProxy
Date added (CISA)
2022-01-10
Remediation due
2022-07-10
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.