Skip to main content
vvserpent
Explorer
April 23, 2025
Question

symbolic link vulnerability and IPS

  • April 23, 2025
  • 2 replies
  • 763 views

Good Morning,

 

There were post about the symbolic link vulnerability on Fortigate recently, the document mentioned  the updated AV / IPS can remove the bad symbolic link. 

 

I want to know if there is AV/ IPS event tell us, the bad symbolic link detected and has been removed ? 

How to check if bad symbolic link exists in the file system ? 

 

Regards,

Jacky

 

2 replies

AEK
SuperUser
SuperUser
April 23, 2025
vvserpent
vvserpentAuthor
Explorer
April 24, 2025

Hi, 

I have read this document but it does not provide the log / event sample about AV/IPS removed the bad symbolic link .

 

If the AV/ IPS removed the bad symbolic link , is there any log / event  I can check ? 

 

 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.