CISA Activity - Fortinet Releases Security Updates for Multiple Products

Fortinet released security updates to address vulnerabilities in multiple products, including OS and FortiProxy. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.

CISA encourages users and administrators to review the following advisories and apply necessary updates:

• FR-IR-23-345 FortiClientMac - Lack of configuration file validation
• [FG-IR-23-493 FortiOS & FortiProxy - Administrator cookie leakage]('https://www.fortiguard.com/psirt/FG-IR-23-345 https://www.fortiguard.com/psirt/FG-IR-23-493')
• FG-IR-23-087 FortiClient Linux - Remote Code Execution due to dangerous nodejs configuration

Continue reading...