FortiWeb Cross-Site Request Forgery (CVE-2016-4066)

FortiWeb Cross-Site Request Forgery (CVE-2016-4066)
FortiWeb Cross-Site Request Forgery (CVE-2016-4066)

Release date:
Updated on:

Affected Systems:

Fortinet FortiWeb 5.5.3

Description:

CVE (CAN) ID: CVE-2016-4066

FortiGate security products can detect and eliminate network threats.

FortiWeb 5.5.3 has the CSRF vulnerability, which allows attackers to change the administrator password using a constructed table.

<* Source: Ewoud Vlasselaer
*>

Suggestion:

Vendor patch:

Fortinet
--------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://fortiguard.com/advisory/fortiweb-csrf-vulnerability

This article permanently updates the link address: