search menu icon-carat-right cmu-wordmark

CERT Coordination Center

Fortinet Fortiweb 5.1 contains a cross-site request forgery vulnerability

Vulnerability Note VU#902790

Original Release Date: 2014-05-07 | Last Revised: 2014-05-07

Overview

Fortinet Fortiweb prior to version 5.2.0 do not sufficiently verify whether a valid request was intentionally provided by the user, which results in a cross-site request forgery (CSRF) vulnerability. (CWE-352)

Description

CWE-352: Cross-Site Request Forgery (CSRF)

Fortinet Fortiweb prior to version 5.2.0 do not sufficiently verify whether a valid request was intentionally provided by the user. The cross-site request forgery (CSRF) vulnerability lies in /system/config/adminadd.

Impact

A remote unauthenticated attacker may be able to trick an authenticated user into making an unintentional request to the web server via a URL, image load, XMLHttpRequest, etc, which will be treated as an authentic request and may result in information leakage or code execution.

Solution

Apply an Update

Fortiweb 5.2.0 has been released to address several CSRF vulnerabilities including this one.

Vendor Information

902790
 
Affected   Unknown   Unaffected

Fortinet, Inc.

Notified:  November 20, 2013 Updated:  December 06, 2013

Status

  Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.


CVSS Metrics

Group Score Vector
Base 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N
Temporal 4.5 E:POC/RL:OF/RC:C
Environmental 1.3 CDP:L/TD:L/CR:M/IR:M/AR:L

References

Acknowledgements

Thanks to William Costa for reporting this vulnerability.

This document was written by Jared Allar.

Other Information

CVE IDs: CVE-2014-3115
Date Public: 2014-05-02
Date First Published: 2014-05-07
Date Last Updated: 2014-05-07 14:11 UTC
Document Revision: 12

Sponsored by the Department of Homeland Security Office of Cybersecurity and Communications.