Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode (the default mode) are not affected.
References
| Link | Resource |
|---|---|
| http://fortiguard.com/advisory/FG-IR-16-088 | Not Applicable |
| http://www.securityfocus.com/bid/94477 | Third Party Advisory VDB Entry |
| http://fortiguard.com/advisory/FG-IR-16-088 | Not Applicable |
| http://www.securityfocus.com/bid/94477 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:58
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://fortiguard.com/advisory/FG-IR-16-088 - Not Applicable | |
| References | () http://www.securityfocus.com/bid/94477 - Third Party Advisory, VDB Entry |
Information
Published : 2017-03-30 14:59
Updated : 2024-11-21 02:58
NVD link : CVE-2016-7541
Mitre link : CVE-2016-7541
CVE.ORG link : CVE-2016-7541
JSON object : View
Products Affected
fortinet
- fortios
CWE
CWE-254
7PK - Security Features