Fortinet Fortiweb CVE-2017-14191 Access Bypass Vulnerability

Bugtraq ID:	103430
Class:	Access Validation Error
CVE:	CVE-2017-14191
Remote:	Yes
Local:	No
Published:	Mar 06 2018 12:00AM
Updated:	Mar 06 2018 12:00AM
Credit:	Yavuz zdemir
Vulnerable:	Fortinet FortiWeb 5.6 Fortinet FortiWeb 5.5.3 Fortinet FortiWeb 5.5.2 Fortinet FortiWeb 5.5.1 Fortinet FortiWeb 5.5 Fortinet FortiWeb 5.3.5 Fortinet FortiWeb 5.3.4 Fortinet FortiWeb 5.3.3 Fortinet FortiWeb 5.3.2 Fortinet FortiWeb 5.3.1 Fortinet FortiWeb 5.2.1 Fortinet FortiWeb 5.1 Fortinet FortiWeb 5.0.4 Fortinet FortiWeb 5.0.3 Fortinet FortiWeb 5.0.2 Fortinet FortiWeb 5.0.1 Fortinet FortiWeb 5.2.0 Fortinet FortiWeb 5.1.4 Fortinet FortiWeb 5.1.3 Fortinet FortiWeb 5.1.2 Fortinet FortiWeb 5.1.1 Fortinet FortiWeb 5.0.0 Fortinet FortiWeb 5.0
Not Vulnerable:	Fortinet FortiWeb 6.1

Fortinet Fortiweb CVE-2017-14191 Access Bypass Vulnerability

Fortinet Fortiweb is prone to an access-bypass vulnerability.

An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.

FortiWeb 5.6.0 and prior are vulnerable; other versions may also be affected.

Fortinet Fortiweb CVE-2017-14191 Access Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Fortinet Fortiweb CVE-2017-14191 Access Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.