PSIRT Advisories

The FortiGuard Labs Product Security Incident Response Team (PSIRT) continually test Fortinet hardware and software products, looking for vulnerabilities and weaknesses. Any such findings are fed back to Fortinet's development teams and serious issues are described along with protective solutions in the advisories below.

Prior to build 237, the Windows version of FSSO can be remotely exploited to run arbitrary code over the TCP/8000 port without...

Feb 27, 2015 Risk IR Number: FG-IR-15-006
FortiClient Android and iOS are affected by two vulnerabilities: Android and iOS FortiClient do not check the validity of server...

Feb 25, 2015 Risk IR Number: FG-IR-15-004
The Web User Interface of FortiGate, FortiManager, FortiAnalyzer, FortiMail and FortiADC D models are vulnerable to reflected...

Feb 25, 2015 Risk IR Number: FG-IR-15-005

Feb 05, 2015 Risk IR Number: FG-IR-15-003

Feb 05, 2015 Risk IR Number: FG-IR-15-002