Fortinet, forticloud SSO vulnerability

Una mas para el bote, criticidad 9.1. An Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiOS, FortiWeb, FortiProxy and FortiSwitchManager may allow an unauthenticated attacker to bypass the FortiCloud SSO login.

https://fortiguard.fortinet.com/psirt/FG-IR-25-647

Toca parchear de nuevo. No recuerdo haber activado eso … y en algunos que he mirado estaba.