{"id":7909,"date":"2022-10-08T08:47:27","date_gmt":"2022-10-08T05:47:27","guid":{"rendered":"https:\/\/www.one-it.ro\/blog\/?p=7909"},"modified":"2022-10-08T10:27:53","modified_gmt":"2022-10-08T07:27:53","slug":"fortinet-avertizeaza-administratorii-it-sa-corecteze-imediat-erorile-critice-de-ocolire-a-autentificarii-pe-firewall-urile-fortigate","status":"publish","type":"post","link":"https:\/\/www.one-it.ro\/blog\/fortinet-avertizeaza-administratorii-it-sa-corecteze-imediat-erorile-critice-de-ocolire-a-autentificarii-pe-firewall-urile-fortigate\/","title":{"rendered":"Fortinet avertizeaz\u0103 administratorii IT s\u0103 corecteze imediat erorile critice de ocolire a autentific\u0103rii pe firewall-urile FortiGate"},"content":{"rendered":"\n\n
\n \n
\n \n
\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n <\/div>\n \n
\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n
\n \n\n
<\/div>\n <\/div>\n <\/div>\n<\/div>\n \n\n
\n Rate this post<\/span>\n <\/div>\n <\/div>\n
\"Firewall-uri

Firewall-uri FortiGate expuse la internet (Shodan)<\/p><\/div>\n

Fortinet a avertizat administratorii IT s\u0103 actualizeze firewall-urile FortiGate \u0219i proxy-urile web FortiProxy la cele mai recente versiuni, care abordeaz\u0103 o vulnerabilitate critic\u0103.<\/h2>\n

Defectul de securitate (urm\u0103rit ca CVE-2022-40684) este o ocolire de autentificare pe interfa\u021ba administrativ\u0103 care ar putea permite actorilor de amenin\u021b\u0103ri la distan\u021b\u0103 s\u0103 se conecteze la dispozitive nepatchate.<\/h2>\n

\u201eO ocolire de autentificare folosind o cale sau un canal alternativ [CWE-88] \u00een FortiOS \u0219i FortiProxy poate permite unui atacator neautentificat s\u0103 efectueze opera\u021biuni pe interfa\u021ba administrativ\u0103 prin solicit\u0103ri HTTP sau HTTPS special concepute\u201d, explic\u0103 Fortinet \u00eentr-un buletin de asisten\u021b\u0103 pentru clien\u021bi emis ast\u0103zi.<\/p>\n

\u201eAceasta este o vulnerabilitate critic\u0103 \u0219i ar trebui tratat\u0103 cu cea mai mare urgen\u021b\u0103\u201d, adaug\u0103 compania.
\nDe asemenea, Fortinet a trimis e-mail clien\u021bilor \u0219i le-a sf\u0103tuit s\u0103 se actualizeze imediat la cele mai recente versiuni disponibile.
\n\u201eDatorit\u0103 capacit\u0103\u021bii de a exploata aceast\u0103 problem\u0103 de la distan\u021b\u0103, Fortinet recomand\u0103 insistent tuturor clien\u021bilor cu versiunile vulnerabile s\u0103 efectueze un upgrade imediat\u201d, a avertizat compania .
\nPotrivit unei c\u0103ut\u0103ri Shodan , peste 100.000 de firewall-uri FortiGate sunt accesibile de pe Internet, de\u0219i nu se \u0219tie dac\u0103 interfe\u021bele lor de gestionare sunt, de asemenea, expuse.<\/p>\n

Lista complet\u0103 a produselor vulnerabile la atacuri care \u00eencearc\u0103 s\u0103 exploateze defectul CVE-2022-40 include:<\/p>\n