Multiple cross-site scripting vulnerabilities on Fortinet FortiGate Devices

Release date:
Updated on:

Affected Systems:
Fortinet FortiGate 5000
Fortinet FortiGate 3950
Fortinet FortiGate 3810A
Description:
--------------------------------------------------------------------------------
Bugtraq id: 55591

Fortinet FortiGate is a popular hardware firewall.

The Fortinet FortiGate device has multiple cross-site scripting vulnerabilities. Attackers can exploit these vulnerabilities to execute arbitrary script code in the affected site user's browser, steal Cookie authentication creden。, and initiate other attacks.

<* Source: Benjamin Kunz Mejri
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Fortinet
--------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.fortinetfirewall.com/index.php