Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may allow an authenticated, non privileged attacker to regenerate the CA certificate via the regeneration URL.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
N/A
Vulnerability Title
Fortinet FortiIsolator 安全漏洞
Vulnerability Description
Fortinet FortiIsolator是美国Fortinet公司的一个为浏览器提供远程安全隔离功能的应用。该应用为Fortinet Security Fabric添加了额外的高级威胁防护功能，并保护关键业务数据免受网络上复杂威胁的侵害。来自Web的内容和文件在远程容器中访问，然后将无风险的内容呈现给用户。 FortiIsolator 2.3.2 及之前版本存在安全漏洞，该漏洞源于不正确的访问控制。经过身份验证的非特权攻击者利用此漏洞可通过重新生成 URL 重新生成 CA 证书。
CVSS Information
N/A
Vulnerability Type
N/A