Multiple cross-site request forgery (CSRF) vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow remote attackers to hijack the authentication of administrators for requests that modify (1) settings or (2) policies, or (3) restart the device via a rebootme action to system/maintenance/shutdown.
References
| Link | Resource |
|---|---|
| http://www.exploit-db.com/exploits/26528/ | Exploit |
Configurations
Configuration 1 (hide)
| AND |
|
History
No history.
Information
Published : 2013-07-08 17:55
Updated : 2024-02-28 12:00
NVD link : CVE-2013-1414
Mitre link : CVE-2013-1414
CVE.ORG link : CVE-2013-1414
JSON object : View
Products Affected
fortinet
- fortigate-60c
- fortios
- fortigate-1240b
- fortigate-5140b
- fortigate-620b
- fortigate-800c
- fortigate-5020
- fortigate-311b
- fortigate-3950b
- fortigate-300c
- fortigate-600c
- fortigate-100d
- fortigate-200b
- fortigate-1000c
- fortigate-5101c
- fortigate-voice-80c
- fortigate-80c
- fortigate-3040b
- fortigaterugged-100c
- fortigate-110c
- fortigate-310b
- fortigate-5001a-sw
- fortigate-20c
- fortigate-5060
- fortigate-3140b
- fortigate-5001b
- fortigate-50b
- fortigate-40c
- fortigate-3810a
- fortigate-3240c
CWE
CWE-352
Cross-Site Request Forgery (CSRF)