Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The SSL-VPN feature in Fortinet FortiOS before 4.3.13 only checks the first byte of the TLS MAC in finished messages, which makes it easier for remote attackers to spoof encrypted content via a crafted MAC field.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Fortinet FortiOS 输入验证漏洞
Vulnerability Description
Fortinet FortiOS是美国飞塔（Fortinet）公司开发的一套专用于FortiGate网络安全平台上的安全操作系统。该系统为用户提供防火墙、防病毒、IPSec/SSL VPN、Web内容过滤和反垃圾邮件等多种安全功能。 Fortinet FortiOS 4.3.12及之前版本的SSL-VPN功能中存在安全漏洞，该漏洞源于程序只检查finished消息中的TLS MAC的第一个字节。远程攻击者可借助特制的MAC字段利用该漏洞伪造加密内容。
CVSS Information
N/A
Vulnerability Type
N/A