Title: Fortinet Releases Security Updates for Multiple Products

Published: Tue, 09 Apr 24 12:00:00 +0000

Fortinet released security updates to address vulnerabilities in multiple products, including OS and FortiProxy. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. 

CISA encourages users and administrators to review the following advisories and apply necessary updates: 

• FR-IR-23-345 FortiClientMac – Lack of configuration file validation
• FG-IR-23-493 FortiOS & FortiProxy – Administrator cookie leakage
• FG-IR-23-087 FortiClient Linux – Remote Code Execution due to dangerous   nodejs configuration

Source: US-CERT.CISA.GOV