CSIRT Panam\u00e1 Aviso 2017-06 \u2013 Vulnerabilidades de Cross-Site Scripting en FortiOS<\/p>\n
Gravedad: Cr\u00edticas y Altas
\nFecha de publicaci\u00f3n: 19 junio 2017
\nFecha de modificaci\u00f3n: 19 junio 2017
\n\u00daltima revisi\u00f3n: Revisi\u00f3n A.
\nFuente: http:\/\/fortiguard.com\/psirt\/FG-IR-17-127<\/p>\n
Sistemas Afectados
\n\u2022 FortiOS versiones 5.4.0 to 5.4.4
\n\u2022 FortiOS versiones 5.2.0 to 5.4.4<\/p>\n
I. Descripci\u00f3n
\nFortinet ha confirmado dos vulnerabilidades en FortiOS, el sistema operativo empleado en sus sistemas, que podr\u00edan permitir a un atacante remoto sin autenticar, construir ataques de cross-site scripting.<\/p>\n
XSS, del ingl\u00e9s Cross-site scripting: es un vector de ataque que puede ser utilizado para robar informaci\u00f3n delicada, secuestrar sesiones de usuario, y comprometer el navegador, subyugando la integridad del sistema. Las vulnerabilidades XSS han existido desde los primeros d\u00edas de la Web.<\/p>\n
II. Impacto
\nEjecutar c\u00f3digo o comandos no autorizados que afectan a FortiOS, que pueden explotarse para cargar y ejecutar un Javascript remoto (malicioso) en un explorador conectado.<\/p>\n
III. Referencia a soluciones, herramientas e informaci\u00f3n
\nFortinet recomienda la actualizaci\u00f3n a la versi\u00f3n FortiOS 5.4.5 o 5.6.0.
\nPara mayor informaci\u00f3n puede visitar: http:\/\/fortiguard.com\/psirt\/FG-IR-17-127<\/p>\n
IV. Informaci\u00f3n de contacto
\nCSIRT PANAMA
\nAutoridad Nacional para la Innovaci\u00f3n Gubernamental
\nE-Mail: info@cert.pa
\nWeb: http:\/\/www.cert.pa<\/p>\n","protected":false},"excerpt":{"rendered":"
CSIRT Panam\u00e1 Aviso 2017-06 \u2013 Vulnerabilidades de Cross-Site Scripting en FortiOS Gravedad: Cr\u00edticas y Altas Fecha de publicaci\u00f3n: 19 junio 2017 Fecha de modificaci\u00f3n: 19 junio 2017 \u00daltima revisi\u00f3n: Revisi\u00f3n A. Fuente: http:\/\/fortiguard.com\/psirt\/FG-IR-17-127 Sistemas Afectados…<\/p>\n","protected":false},"author":4,"featured_media":1020,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-1019","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-avisos-de-seguridad"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1019","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1019"}],"version-history":[{"count":3,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1019\/revisions"}],"predecessor-version":[{"id":1023,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1019\/revisions\/1023"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/media\/1020"}],"wp:attachment":[{"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1019"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1019"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1019"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}