Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
imranbb63
New Contributor

Need information on CSB-221006-1

This is regarding the Advanced Notice: FG-IR-22-377: Critical Severity FortiOS /FortiProxy- Authentication bypass on administrative interface.

 

I want to configure the workaround to apply a firewall policy to local-in traffic to restrict, please see Customer Support Bulletin CSB-221006-1

 

5 REPLIES 5
DeviliArcusIT
New Contributor

does the vulnerability also apply if the HTTPS admin port has only specific WAN IP's whitelisted for admin access ?

scan888

We were wondering the same thing and found that in version 7.0 the FortiGate does not respond to requests (SYN packet is not answered).
Prerequisite is that all "Trusted Hosts" are set!

In version 7.2 the behavior is different. There the Web GUI answers also if all "Trusted Hosts" are set. There it is mandatory to work with loca-in policies.

- Have you found a solution? Then give your helper a "Like" and mark the solution.
- Have you found a solution? Then give your helper a "Like" and mark the solution.
DeviliArcusIT
New Contributor

ah just found the work-around, apply a IP whitelist and you should be fine

DeviliArcusIT_0-1665135635164.png

 

juansans
New Contributor

Is there a CVE for this vulnerability?

jasalinas

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors