CVE-2018-1355 : What You Need to Know

A vulnerability known as open redirect has been discovered in versions 6.0.0 and 5.6.5 of Fortinet FortiManager, as well as in versions 6.0.0 and 5.6.5 of FortiAnalyzer. This vulnerability allows an attacker to insert script code while converting an HTML table to a PDF document using the FortiView feature. Using this vulnerability, an attacker could potentially manipulate an authenticated user into creating a PDF file that contains harmful URLs.

Understanding CVE-2018-1355

This CVE identifies an open redirect vulnerability in Fortinet FortiManager and FortiAnalyzer versions 6.0.0, 5.6.5, and below.

What is CVE-2018-1355?

An open redirect vulnerability in Fortinet FortiManager and FortiAnalyzer versions allows attackers to inject script code during the conversion of an HTML table to a PDF document, potentially leading to the creation of PDF files with harmful URLs.

The Impact of CVE-2018-1355

This vulnerability could be exploited by attackers to manipulate authenticated users into generating PDF files containing malicious URLs.

Technical Details of CVE-2018-1355

This section provides more technical insights into the vulnerability.

Vulnerability Description

The vulnerability allows attackers to inject script code during the conversion process, posing a risk of creating PDF files with harmful URLs.

Affected Systems and Versions

Product: Fortinet FortiManager, FortiAnalyzer
Vendor: Fortinet, Inc.
Versions Affected: FortiManager 6.0.0, 5.6.5, and below versions; FortiAnalyzer 6.0.0, 5.6.5, and below versions

Exploitation Mechanism

Attackers can exploit this vulnerability by manipulating the FortiView feature to inject script code during the conversion process.

Mitigation and Prevention

Protecting systems from CVE-2018-1355 requires immediate actions and long-term security practices.

Immediate Steps to Take

Apply security patches provided by Fortinet promptly.
Educate users about the risks of opening PDF files from untrusted sources.
Monitor network traffic for any suspicious activities.

Long-Term Security Practices

Regularly update and patch all software and systems.
Implement strong authentication mechanisms to prevent unauthorized access.
Conduct security training for employees to raise awareness about social engineering attacks.
Utilize web application firewalls to detect and block malicious traffic.

Patching and Updates

Ensure that Fortinet FortiManager and FortiAnalyzer are updated to the latest versions to mitigate the open redirect vulnerability.