[zwriner]

CVSS Score: 9.6

Vulnerable Fortinet product versions:

FortiOS versions between 7.0.0 - 7.0.6 and 7.2.0 - 7.2.1

FortiProxy versions between 7.0.0 - 7.0.6 and version 7.2.0

FortiSwitchManager versions 7.0.0 and 7.2.0

[fritz]

I don't see the link in your post?

I'd recommend using the Metasploit exploit: https://packetstormsecurity.com/files/16...ypass.html

[mothered]

I don't see the link in your post?

Obviously forgot to post It.

I've come across countless users over the last decade who did the same.

[fritz]

I don't see the link in your post?

Obviously forgot to post It.

I've come across countless users over the last decade who did the same.

Seems to be a pattern with this user (bot?) though.
https://sinister.ly/Thread-Leak-Google-C...e-Metadata
https://sinister.ly/Thread-Leak-CodeMete...-Dashboard
...
I believe they're originally all supposed to be from blog.criminalip.io, but it looks like his script is broken


About the original subject, I don't know much about Fortinet, but it could be interesting to the community to also have a way to identify potential vulnerable servers (search for open ports or hints in google search for example).
Seeing the exploit code it seems it only checks if random path is 401 protected and that a "fortinet-formatted" request to /system/status does return a 200.

[mothered]

Seems to be a pattern with this user (bot?) though.
https://sinister.ly/Thread-Leak-Google-C...e-Metadata
https://sinister.ly/Thread-Leak-CodeMete...-Dashboard

Not sure offhand.

I'll need to assess his/her activity.

About the original subject, I don't know much about Fortinet, but it could be interesting to the community to also have a way to identify potential vulnerable servers (search for open ports or hints in google search for example).

Absolutely.

I couldn't agree more.

[zwriner]

I don't see the link in your post?

I'd recommend using the Metasploit exploit: https://packetstormsecurity.com/files/16...ypass.html

Found using criminal ip's asset search - https://www.criminalip.io/

[mothered]

Found using criminal ip's asset search - https://www.criminalip.io/

It's best to add the link to your opening post.

[zwriner]

Found using criminal ip's asset search - https://www.criminalip.io/

It's best to add the link to your opening post.

My bad I'll keep that in mind next time. Thank you!

[HackingRealm]

thanks a lot.... been looking for this

[Oni]

Moving this to Website & Server Hacking.