Fortinet FortiOS CVE-2013-4604 Security Bypass Vulnerability

Bugtraq ID:	60571
Class:	Unknown
CVE:	CVE-2013-4604
Remote:	Yes
Local:	No
Published:	Jun 13 2013 12:00AM
Updated:	Jun 13 2013 12:00AM
Credit:	Anderson Freitas
Vulnerable:	Fortinet FortiOS 5.0.2 Fortinet FortiOS 5.0.1 Fortinet FortiOS 4.3.8 Fortinet FortiOS 3.0 Fortinet FortiOS 2.80 Fortinet FortiOS 2.50 Fortinet FortiOS 2.36 Fortinet FortiOS 5.0
Not Vulnerable:	Fortinet FortiOS 5.0.3

Fortinet FortiOS CVE-2013-4604 Security Bypass Vulnerability

FortiGate running FortiOS is prone to a security-bypass vulnerability.

Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks.

Versions prior to FortiOS 5.0.3 are vulnerable.

Fortinet FortiOS CVE-2013-4604 Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Fortinet FortiOS CVE-2013-4604 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Fortinet FortiOS CVE-2013-4604 Security Bypass Vulnerability

References:

• Fortinet Homepage (Fortinet)
  
• Improper Guest User Permission Management Issue in FortiGate (Anderson Freitas)