Security NEXT, ITmedia, and ScanNetSecurity have published an investigation into a vulnerability that bypasses authentication on the management screen of Fortinet products.

Please see here for the detail.

● Security NEXT (October 14, 2022)
[About 8,000 “FortiOS” administrator login screens in Japan are in full view-may be targeted]
https://www.security-next.com/140573

● ITmedia Enterprise (October 18, 2022)
[Thinking about vulnerabilities in Fortinet products, look to “N-Day” for security measures]
https://www.itmedia.co.jp/enterprise/articles/2210/18/news040.html

●ScanNetSecurity (October 19, 2022)
[FortiOS, FortiProxy and FortiSwitchManager management screen authentication bypass vulnerability, measuring the number of servers exposed to the public]
https://scan.netsecurity.ne.jp/article/2022/10/19/48355.html