Fortinet FortiWeb CVE-2014-3115 Multiple Cross Site Request Forgery Vulnerabilities
BID:67235
Info
Fortinet FortiWeb CVE-2014-3115 Multiple Cross Site Request Forgery Vulnerabilities
| Bugtraq ID: | 67235 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-3115 |
| Remote: | Yes |
| Local: | No |
| Published: | May 02 2014 12:00AM |
| Updated: | May 08 2014 01:11AM |
| Credit: | William Costa, and Enrique Nissim |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Fortinet FortiWeb CVE-2014-3115 Multiple Cross Site Request Forgery Vulnerabilities
Fortinet FortiWeb is prone to multiple cross-site request-forgery vulnerabilities because it does not properly validate HTTP requests.
Exploiting these issues may allow a remote attacker to perform certain unauthorized actions. This may lead to further attacks.
Fortinet FortiWeb 5.1.x and prior versions are vulnerable.
Fortinet FortiWeb is prone to multiple cross-site request-forgery vulnerabilities because it does not properly validate HTTP requests.
Exploiting these issues may allow a remote attacker to perform certain unauthorized actions. This may lead to further attacks.
Fortinet FortiWeb 5.1.x and prior versions are vulnerable.
Exploit / POC
Fortinet FortiWeb CVE-2014-3115 Multiple Cross Site Request Forgery Vulnerabilities
To exploit this issue the attacker needs to entice a user into following a malicious URI.
To exploit this issue the attacker needs to entice a user into following a malicious URI.
Solution / Fix
Fortinet FortiWeb CVE-2014-3115 Multiple Cross Site Request Forgery Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Fortinet FortiWeb CVE-2014-3115 Multiple Cross Site Request Forgery Vulnerabilities
References:
References:
- Fortinet Homepage (Fortinet)