A five-year-old major two-factor authentication (2FA) bypass flaw leaves over 10,000 Fortinet firewalls open to continuous attacks.
In order to fix this vulnerability (recorded as CVE-2020-12812), Fortinet published FortiOS versions 6.4.1, 6.2.4, and 6.0.10 in July 2020. Administrators who were unable to patch the issue right away were recommended to disable username-case-sensitivity in order to prevent efforts to circumvent 2FA on their devices.
When the username’s case is altered, this inappropriate authentication security weakness (ranked 9.8/10 in severity) in FortiGate SSL VPN enables attackers to log in to unpatched firewalls without being asked for the second element of authentication (FortiToken).
Fortinet alerted clients last week that attackers are still taking advantage of CVE-2020-12812, which targets firewalls with susceptible settings that need to have LDAP (Lightweight Directory Access Protocol) enabled read more about Over 10K Fortinet firewalls exposed to actively exploited 2FA bypass.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.