FortiJump Fiasco: New Vulnerability Takes Security to New Lows!
FortiJump Higher, a new vulnerability discovered in FortiManager, defies Fortinet’s patching efforts. Researchers claim Fortinet patched the wrong code, leaving systems vulnerable. Threat actors are likely exploiting both FortiJump and FortiJump Higher, posing a significant security risk. Fortinet has been informed, but the vulnerability remains unaddressed in patched versions.
Hot Take:
Looks like Fortinet’s security patch is about as effective as a screen door on a submarine! With FortiJump Higher, they’ve managed to give hackers a VIP pass to their entire network. Bravo, Fortinet!
Key Points:
- WatchTowr discovered a new vulnerability, dubbed “FortiJump Higher,” in FortiManager.
- The supposed patch from Fortinet is reportedly ineffective for all exploit methods.
- Adversaries can escalate privileges from a managed FortiGate appliance to the central FortiManager appliance.
- WatchTowr claims the low complexity of these vulnerabilities questions the overall quality of the FortiManager codebase.
- Fortinet has been informed of these new findings, but no public response has yet been made.
Already a member? Log in here