Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5qrm-hvcf-q4hg

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode (the default mode) are not affected.

Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode (the default mode) are not affected.

EPSS

Процентиль: 45%
0.00228
Низкий

5.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.9
nvd
почти 9 лет назад

Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode (the default mode) are not affected.

CVSS3: 5.9
fstec
около 9 лет назад

Уязвимость операционной системы FortiOS, связанная с прекращением мониторинга активных сетевых сеансов после обновления механизма сканирования, позволяющая нарушителю выполнить обход защиты

EPSS

Процентиль: 45%
0.00228
Низкий

5.9 Medium

CVSS3