JWT used for authentication in web GUI signed with static key
Fortinet warns that FortiMonitorOnSight's web GUI uses JWTs signed with a static key, enabling remote unauthenticated authentication bypass.
1 stories, newest first · one card per story
Fortinet warns that FortiMonitorOnSight's web GUI uses JWTs signed with a static key, enabling remote unauthenticated authentication bypass.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views