Security researchers from SEC Consult Vulnerability Lab discovered that multiple Fortinet products use a weak encryption cipher (“XOR” with a static key) and cryptographic keys to communicate with the FortiGuard Web Filter, AntiSpam and AntiVirus cloud services.
An attacker could exploit the issues to eavesdrop on user traffic and manipulate it.
this cloud communication is used for the FortiGuard Web Filter feature, FortiGuard AntiSpam feature and FortiGuard AntiVirus feature.
reads the analysis published by the experts.
The messages are encrypted using XOR “encryption” with a static key.
The vulnerability affects versions of FortiOS (before 6.0.7 or 6.2.0), FortiClient for Windows before 6.2.0, and FortiClient for Mac before 6.2.2.
To read the complete article see:
<https://securityaffairs.co/wordpress/94392/hacking/fortinet-information-disclosure.html>
