Details of VAR-201211-0266

ID

VAR-201211-0266

CVE

CVE-2012-4948

TITLE

Fortigate UTM appliances share the same default CA certificate

Trust: 0.8

sources: CERT/CC: VU#111708

DESCRIPTION

The default configuration of Fortinet Fortigate UTM appliances uses the same Certification Authority certificate and same private key across different customers' installations, which makes it easier for man-in-the-middle attackers to spoof SSL servers by leveraging the presence of the Fortinet_CA_SSLProxy certificate in a list of trusted root certification authorities. The private key, which has been compromised, allows attackers to create and sign fake certificates. FortiGate of UTM The appliance includes CA There is a problem with the handling of the certificate. FortiGate of UTM The appliance is common by default CA It uses a certificate and its private key is publicly available on the web. Therefore, this CA All devices that use certificates may be affected by this vulnerability.Man-in-the-middle attacks by third parties (man-in-the-middle attack) May be eavesdropped on, or malware may be installed. Fortigate UTM appliances is prone to a security-bypass vulnerability. Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks and gain access to sensitive information; other attacks are also possible. Fortinet FortiGate is a network security platform developed by Fortinet. The platform provides functions such as firewall, antivirus and intrusion prevention (IPS), application control, antispam, wireless controller and WAN acceleration

Trust: 2.7

sources: NVD: CVE-2012-4948 // CERT/CC: VU#111708 // JVNDB: JVNDB-2012-005202 // BID: 56382 // VULHUB: VHN-58229

AFFECTED PRODUCTS

vendor:	fortinet	model:	fortigate-310b	scope:	eq	version:	-	Trust: 1.6
vendor:	fortinet	model:	fortigate-50b	scope:	eq	version:	-	Trust: 1.6
vendor:	fortinet	model:	fortigate-200b	scope:	eq	version:	-	Trust: 1.6
vendor:	fortinet	model:	fortigate-3140b	scope:	eq	version:	-	Trust: 1.6
vendor:	fortinet	model:	fortigate-5140b	scope:	eq	version:	-	Trust: 1.6
vendor:	fortinet	model:	fortigate-3950b	scope:	eq	version:	-	Trust: 1.6
vendor:	fortinet	model:	fortigate-1000c	scope:	eq	version:	-	Trust: 1.6
vendor:	fortinet	model:	fortigate-3040b	scope:	eq	version:	-	Trust: 1.6
vendor:	fortinet	model:	fortigate-5020	scope:	eq	version:	-	Trust: 1.6
vendor:	fortinet	model:	fortigate-5060	scope:	eq	version:	-	Trust: 1.6
vendor:	fortinet	model:	fortigate-20c	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	fortigate-3810a	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	fortigate-5001a-sw	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	fortigate-600c	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	fortigate-5001b	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	fortigate-80c	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	fortigate-300c	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	fortigate-60c	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	fortigate-voice-80c	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	fortigate-800c	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	fortigate-110c	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	fortigate-620b	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	fortigate-40c	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	fortigate-3240c	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	fortigate-5101c	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	fortigaterugged-100c	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	fortigate-100d	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	fortigate-1240b	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	fortigate-311b	scope:	eq	version:	-	Trust: 1.0
vendor:	fortinet	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	fortinet	model:	fortigate	scope:	eq	version:	utm the appliance	Trust: 0.8
vendor:	fortinet	model:	unified threat management	scope:	eq	version:	0	Trust: 0.3

sources: CERT/CC: VU#111708 // BID: 56382 // JVNDB: JVNDB-2012-005202 // CNNVD: CNNVD-201211-077 // NVD: CVE-2012-4948

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD:	CVE-2012-4948
value:	MEDIUM
Trust: 1.6
nvd@nist.gov:	CVE-2012-4948
value:	MEDIUM
Trust: 1.0
CNNVD:	CNNVD-201211-077
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-58229
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2012-4948
severity:	MEDIUM
baseScore:	5.3
vectorString:	AV:A/AC:H/AU:N/C:C/I:P/A:N
accessVector:	ADJACENT_NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	3.2
impactScore:	7.8
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
NVD:	CVE-2012-4948
severity:	MEDIUM
baseScore:	4.6
vectorString:	NONE
accessVector:	ADJACENT NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	3.2
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8
VULHUB:	VHN-58229
severity:	MEDIUM
baseScore:	5.3
vectorString:	AV:A/AC:H/AU:N/C:C/I:P/A:N
accessVector:	ADJACENT_NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	3.2
impactScore:	7.8
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: CERT/CC: VU#111708 // VULHUB: VHN-58229 // JVNDB: JVNDB-2012-005202 // CNNVD: CNNVD-201211-077 // NVD: CVE-2012-4948

PROBLEMTYPE DATA

problemtype:	CWE-295	Trust: 1.1
problemtype:	CWE-16	Trust: 0.8

sources: VULHUB: VHN-58229 // JVNDB: JVNDB-2012-005202 // NVD: CVE-2012-4948

THREAT TYPE

specific network environment

Trust: 0.6

sources: CNNVD: CNNVD-201211-077

TYPE

configuration error

Trust: 0.6

sources: CNNVD: CNNVD-201211-077

CONFIGURATIONS

sources: JVNDB: JVNDB-2012-005202

EXPLOIT AVAILABILITY

sources: CERT/CC: VU#111708

PATCH

title:

Unified Threat Management (UTM)

url:

http://www.fortinet.com/solutions/unified_threat_management.html

Trust: 0.8

sources: JVNDB: JVNDB-2012-005202

EXTERNAL IDS

db:	NVD	id:	CVE-2012-4948	Trust: 3.6
db:	CERT/CC	id:	VU#111708	Trust: 3.3
db:	BID	id:	56382	Trust: 2.0
db:	OSVDB	id:	87048	Trust: 1.1
db:	JVNDB	id:	JVNDB-2012-005202	Trust: 0.8
db:	CNNVD	id:	CNNVD-201211-077	Trust: 0.7
db:	VULHUB	id:	VHN-58229	Trust: 0.1

sources: CERT/CC: VU#111708 // VULHUB: VHN-58229 // BID: 56382 // JVNDB: JVNDB-2012-005202 // CNNVD: CNNVD-201211-077 // NVD: CVE-2012-4948

REFERENCES

url:	http://www.kb.cert.org/vuls/id/111708	Trust: 2.5
url:	http://www.securityfocus.com/bid/56382	Trust: 1.7
url:	http://osvdb.org/87048	Trust: 1.1
url:	http://docs.fortinet.com/fos40hlp/43/wwhelp/wwhimpl/common/html/wwhelp.htm?context=fgt&file=misc_utm_chapter.61.13.html	Trust: 0.8
url:	http://kb.fortinet.com/kb/viewcontent.do?externalid=fd32404	Trust: 0.8
url:	http://www.fortinet.com/solutions/unified_threat_management.html	Trust: 0.8
url:	https://media.torproject.org/misc/2012-07-03-cyberoam-cve-2012-3372.txt	Trust: 0.8
url:	http://docs.fortinet.com/fos40hlp/43/wwhelp/wwhimpl/js/html/wwhelp.htm	Trust: 0.8
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-4948	Trust: 0.8
url:	http://jvn.jp/cert/jvnvu111708	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-4948	Trust: 0.8

sources: CERT/CC: VU#111708 // VULHUB: VHN-58229 // JVNDB: JVNDB-2012-005202 // CNNVD: CNNVD-201211-077 // NVD: CVE-2012-4948

CREDITS

Bitwiper

Trust: 0.9

sources: BID: 56382 // CNNVD: CNNVD-201211-077

SOURCES

db:	CERT/CC	id:	VU#111708
db:	VULHUB	id:	VHN-58229
db:	BID	id:	56382
db:	JVNDB	id:	JVNDB-2012-005202
db:	CNNVD	id:	CNNVD-201211-077
db:	NVD	id:	CVE-2012-4948

LAST UPDATE DATE

2024-11-23T23:02:53.069000+00:00

SOURCES UPDATE DATE

db:	CERT/CC	id:	VU#111708	date:	2012-11-02T00:00:00
db:	VULHUB	id:	VHN-58229	date:	2016-12-07T00:00:00
db:	BID	id:	56382	date:	2012-11-02T00:00:00
db:	JVNDB	id:	JVNDB-2012-005202	date:	2012-11-16T00:00:00
db:	CNNVD	id:	CNNVD-201211-077	date:	2012-11-15T00:00:00
db:	NVD	id:	CVE-2012-4948	date:	2024-11-21T01:43:48.363

SOURCES RELEASE DATE

db:	CERT/CC	id:	VU#111708	date:	2012-11-02T00:00:00
db:	VULHUB	id:	VHN-58229	date:	2012-11-14T00:00:00
db:	BID	id:	56382	date:	2012-11-02T00:00:00
db:	JVNDB	id:	JVNDB-2012-005202	date:	2012-11-06T00:00:00
db:	CNNVD	id:	CNNVD-201211-077	date:	2012-11-06T00:00:00
db:	NVD	id:	CVE-2012-4948	date:	2012-11-14T12:30:59.507