| Description |
This article describes the reasons for a PCI scan failure due to a seemingly vulnerable .gz file. |
| Scope | Any supported version of FortiGate. |
| Solution |
In some cases, the client performs a PCI scan and receives a failure report due to a vulnerability where there is a .gz file coming from the FortiGate public IP. The URL in the report may look like this: 'https://<FGT_IP>/favicon/safari-pinned-tab.svg'. This file is simply a favicon with a Fortinet logo for the SSL-login page which can be found in the 'Replacement message' code:
Following the link in the PCI scan will show the Fortinet logo:
Having a favicon exposed is not considered a security vulnerability. A favicon is a small icon or image that is displayed in the browser tab next to the title of a web page. These files do not disclose any sensitive info and hence are not considered vulnerable. |
