CNNVD-202512-1217 Information
CNNVD ID
CNNVD-202512-1217
Related CVE
- CNNVD Published: 2025-12-09
Description (Chinese)
Fortinet FortiOS等都是美国飞塔（Fortinet）公司的产品。Fortinet FortiOS是一套专用于FortiGate网络安全平台上的安全操作系统。Fortinet FortiProxy是一种安全的网络代理，通过结合多种检测技术，如Web过滤、DNS过滤、DLP、反病毒、入侵防御和高级威胁保护，可以保护员工免受网络攻击。FortiProxy有助于减少带宽需求，并通过内容和视频缓存优化网络。Fortinet FortiSwitchManager是一款网络交换机管理工具，旨在帮助组织管理其 FortiSwitch 系列网络交换机。 Fortinet多款产品存在数据伪造问题漏洞，该漏洞源于加密签名验证不当，可能导致绕过FortiCloud SSO身份验证。以下产品及版本受到影响：FortiOS 7.6.0版本至7.6.3版本、FortiOS 7.4.0版本至7.4.8版本、FortiOS 7.2.0版本至7.2.11版本、FortiOS 7.0.0版本至7.0.17版本、FortiProxy 7.6.0版本至7.6.3版本、FortiProxy 7.4.0版本至7.4.10版本、FortiProxy 7.2.0版本至7.2.14版本、FortiProxy 7.0.0版本至7.0.21版本、FortiSwitchManager 7.2.0版本至7.2.6版本和FortiSwitchManager 7.0.0版本至7.0.5版本。
Description (English)
Fortinet FortiOS and others are products of Fortinet. Fortinet FortiOS is a secure operating system dedicated to the FortiGate network security platform. Fortinet FortiProxy is a secure network agent who can protect employees from cyberattacks by combining multiple detection techniques such as Web filtering, DNS filtering, DLP, anti-virus, invasion defense and advanced threat protection. FortiProxy helps reduce bandwidth demand and optimizes the network through content and video caches. Fortinet FortiSwitchManager is a network switch management tool designed to help organizations manage their FortiSwitch series network switches. Fortinet’s multiple products have a loophole in the problem of data forgery, which stems from the improper authentication of encrypted signatures, which could lead to the circumvention of FortiCloud SSO identification. The following products and versions were affected: FortiOS 7.6.0 to 7.6.3, FortiOS 7.4.0 to 7.4.8, FortiOS 7.2.01 to 7.2.11, FortiOS 7.0.0 to 7.0.17, FortiProxy 7.6.0 to 7.6.3, FortiProxy 7.4.0 to 7.4.10, FortiProxy 7.2.0 to 7.2.14, FortiProxy 7.0.0 to 7.0.21, FortiSwitchManager 7.2.06 to 7.2.6 and FortiSwitchManager 7.0.0 to 7.5.
Hazard Level
Low
Vulnerability Type
数据伪造问题
Affected Vendor
飞塔
Published
2025-12-09
Last Modified
2026-02-24
References
https://fortiguard.fortinet.com/psirt/FG-IR-25-647
Patch
https://fortiguard.fortinet.com/psirt/FG-IR-25-647
Share on: