Associated Reports & Timeline
1.
Pesquisa de vulnerabilidade 1Day pela Equipe de Pesquisa da Hakai Este post trata da jornada para criar uma Prova de Conceito sobre a CVE-2022-40684, esta vulnerabilidade foi atribuída pela Fortinet como uma falha de autenticação usando uma vulnerabilidade de caminho ou canal alternativo [CWE-288]. Linha do Tempo 07/10/2022 – Primeira notícia sobre a vulnerabilidade, […]
2.
1Day vulnerability research by Hakai – Research Team This post is about the journey to create a Proof-of-concept about CVE-2022-40684, this vulnerability has been assigned by Fortinet as an authentication bypass using an alternate path or channel vulnerability [CWE-288]. Timeline 07/10/2022 – First news about the vulnerability, on 10/07/2022 Gi7w0rm tweeted that Fortinet was […]
3.
Fortinet recently patched a critical authentication bypass vulnerability that gives an attacker the ability to login as an administrator,
4.
# FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass IOCs (CVE-2022-40684) James Horseman October 11, 2022 Attack Blogs ## Introduction The recent FortiOS / FortiProxy /...