製品・ソフトウェアに関する情報

JVN脆弱性詳細

FortiOS におけるセキュリティ機能に関する脆弱性

Title	FortiOS におけるセキュリティ機能に関する脆弱性
Summary	FortiOS には、セキュリティ機能に関する脆弱性が存在します。
Possible impacts	情報を改ざんされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Nov. 22, 2016, midnight
Registration Date	April 28, 2017, 6:08 p.m.
Last Update	April 28, 2017, 6:08 p.m.

Affected System

フォーティネット

FortiOS 5.4.0 未満の 5.x

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2016-7541	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7541
National Vulnerability Database (NVD)
2	CVE-2016-7541	https://nvd.nist.gov/vuln/detail/CVE-2016-7541

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-254	https://cwe.mitre.org/data/definitions/254.html

ベンダー情報

No	Name	URL
FortiGuard Security Advisories
1	FortiOS flow-mode detection bypass under certain conditions	https://www.fortiguard.com/psirt/FG-IR-16-088

Change Log

No	Changed Details	Date of change
0	[2017年04月28日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2016-7541

Summary	Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the FortiGate's IPSengine is configured in flow mode. All FortiGate versions with IPS configured in proxy mode (the default mode) are not affected.
Publication Date	March 30, 2017, 11:59 p.m.
Registration Date	Jan. 26, 2021, 2:17 p.m.
Last Update	Nov. 21, 2024, 11:58 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	http://fortiguard.com/advisory/FG-IR-16-088	Not Applicable
2	http://fortiguard.com/advisory/FG-IR-16-088	Not Applicable
3	http://www.securityfocus.com/bid/94477	Third Party Advisory VDB Entry
4	http://www.securityfocus.com/bid/94477	Third Party Advisory VDB Entry

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-254	セキュリティ機能	https://cwe.mitre.org/data/definitions/254.html