ericwang_FTNT
Staff
Staff
‎07-06-2023
Last activity: Jul 6, 2023 3:47:25 PM
80 Profile 80% Complete
Most Liked Posts Recent Solutions
No Content Available

User Activity

DescriptionThis article describes a security risk named: "Undefined CVE, HTTP OPTIONS Method Enabled".Web servers that respond to the OPTIONS HTTP method expose what other methods are supported by the web server, allowing attackers to narrow and inte...
DescriptionPCI compliance reports feature an issue called 'HTTP Security Header notdetected', with a sub-section on X-Content-Type-Options HTTP header on FortiOS web administration interface (usually on port 443)."""X-Content-Type-Options: This HTTP ...
DescriptionAn information disclosure vulnerability allows a network adjacent attacker to determine the TCP/IP stack state (including IP address, TCP sequences,etc) of the system via sending spoofed TCP packets to the target when the latter operates u...
DescriptionSome vulnerability scanning tools report that the FortiOS admin webUI login page submits passwords using the GET method; the POST is suggested to be used instead.the related keywords in such reports can be:'Password Transmitted over Query ...
Description This article describes that some public scanning tools report that FortiOS is vulnerable to ISC BIND DNS vulnerabilities.the vulnerabilities in such reports can be (but not limited to): CVE-2006-0987- DNS Server Spoofed Request Amplificat...
Kudos from