{"id":1617047,"date":"2025-04-08T19:09:42","date_gmt":"2025-04-08T21:09:42","guid":{"rendered":"https:\/\/teknomers.com\/fr\/fortinet-exhorte-les-mises-a-niveau-de-fortiswitch-pour-corriger-le-changement-de-mot-de-passe-de-ladministrateur-critique\/"},"modified":"2025-04-08T19:09:47","modified_gmt":"2025-04-08T21:09:47","slug":"fortinet-exhorte-les-mises-a-niveau-de-fortiswitch-pour-corriger-le-changement-de-mot-de-passe-de-ladministrateur-critique","status":"publish","type":"post","link":"https:\/\/teknomers.com\/fr\/fortinet-exhorte-les-mises-a-niveau-de-fortiswitch-pour-corriger-le-changement-de-mot-de-passe-de-ladministrateur-critique\/","title":{"rendered":"Fortinet exhorte les mises \u00e0 niveau de Fortiswitch pour corriger le changement de mot de passe de l&#8217;administrateur critique"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">08 avril 2025<\/span><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">Ravie Lakshmanan<\/span><\/span><span class=\"p-tags\">S\u00e9curit\u00e9 \/ vuln\u00e9rabilit\u00e9 du r\u00e9seau<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><a rel=\"nofollow\" href=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2025\/04\/Fortinet-exhorte-les-mises-a-niveau-de-Fortiswitch-pour-corriger.jpg\" style=\"clear: left; display: block; float: left;  text-align: center;\"><\/a><\/div>\n<p>Fortinet a publi\u00e9 des mises \u00e0 jour de s\u00e9curit\u00e9 pour aborder un d\u00e9faut de s\u00e9curit\u00e9 critique impactant Fortiswitch qui pourrait permettre \u00e0 un attaquant de modifier les mots de passe non autoris\u00e9s.<\/p>\n<p>La vuln\u00e9rabilit\u00e9, suivie comme <strong>CVE-2024-48887<\/strong>porte un score CVSS de 9,3 sur un maximum de 10,0.<\/p>\n<p>&#8220;Une vuln\u00e9rabilit\u00e9 de changement de mot de passe non v\u00e9rifi\u00e9 [CWE-620] Dans Fortiswitch, GUI peut permettre \u00e0 un attaquant non authentifi\u00e9 distant de modifier les mots de passe administratifs via une demande sp\u00e9cialement con\u00e7ue &#8221; <a rel=\"noopener nofollow\" href=\"https:\/\/fortiguard.fortinet.com\/psirt\/FG-IR-24-435\" target=\"_blank\">dit<\/a> Dans un avis publi\u00e9 aujourd&#8217;hui.<\/p>\n<p>La lacune affecte les versions suivantes &#8211;<\/p>\n<ul>\n<li>Fortiswitch 7.6.0 (mise \u00e0 niveau vers 7.6.1 ou plus)<\/li>\n<li>Fortiswitch 7.4.0 \u00e0 7.4.4 (mise \u00e0 niveau vers 7.4.5 ou plus)<\/li>\n<li>Fortiswitch 7.2.0 \u00e0 7.2.8 (mise \u00e0 niveau vers 7.2.9 ou sup\u00e9rieur)<\/li>\n<li>Fortiswitch 7.0.0 \u00e0 7.0.10 (mise \u00e0 niveau vers 7.0.11 ou plus), et<\/li>\n<li>Fortiswitch 6.4.0 \u00e0 6.4.14 (mise \u00e0 niveau vers 6.4.15 ou plus)<\/li>\n<\/ul>\n<div class=\"dog_two clear\"><center class=\"cf\"><a rel=\"nofollow noopener sponsored\" href=\"https:\/\/thehackernews.uk\/zscaler-inside-d\" target=\"_blank\" title=\"Cybersecurity\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"Cybers\u00e9curit\u00e9\" src=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2025\/04\/1743491377_264_Apple-a-condamne-une-amende-a-150-millions-deuros-par.png\" width=\"727\" height=\"90\"\/><\/a><\/center><\/div>\n<p>La soci\u00e9t\u00e9 de s\u00e9curit\u00e9 du r\u00e9seau a d\u00e9clar\u00e9 que le trou de s\u00e9curit\u00e9 avait \u00e9t\u00e9 d\u00e9couvert en interne et signal\u00e9 par Daniel Rozeboom de l&#8217;\u00e9quipe de d\u00e9veloppement de l&#8217;interface utilisateur de Fortiswitch.<\/p>\n<p>En tant que solution de contournement, Fortinet recommande de d\u00e9sactiver l&#8217;acc\u00e8s HTTP \/ HTTPS \u00e0 partir d&#8217;interfaces administratives et de restreindre l&#8217;acc\u00e8s au syst\u00e8me aux h\u00f4tes de confiance uniquement.<\/p>\n<p>Bien qu&#8217;il n&#8217;y ait aucune preuve que la vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 exploit\u00e9e, un certain nombre de d\u00e9fauts de s\u00e9curit\u00e9 affectant les produits Fortinet ont \u00e9t\u00e9 arm\u00e9es par les acteurs de la menace, ce qui rend les utilisateurs qui se d\u00e9placent rapidement pour appliquer les correctifs. <\/p>\n<p><\/p>\n<div class=\"cf note-b\">Vous avez trouv\u00e9 cet article int\u00e9ressant? Suivez-nous <a rel=\"noopener nofollow\" href=\"https:\/\/twitter.com\/thehackersnews\" target=\"_blank\">Gazouillement <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a>  et <a rel=\"noopener nofollow\" href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" target=\"_blank\">Liendin<\/a> Pour lire plus de contenu exclusif que nous publions.<\/div>\n<\/div>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/><br \/>\n<br \/><a href=\"https:\/\/thehackernews.com\/2025\/04\/fortinet-urges-fortiswitch-upgrades-to.html\" rel=\"nofollow noopener\" target=\"_blank\">ttn-fr-57<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ue80208 avril 2025\ue804Ravie LakshmananS\u00e9curit\u00e9 \/ vuln\u00e9rabilit\u00e9 du r\u00e9seau Fortinet a publi\u00e9 des mises \u00e0 jour de s\u00e9curit\u00e9 pour aborder un d\u00e9faut de s\u00e9curit\u00e9 critique impactant Fortiswitch qui pourrait permettre \u00e0 un attaquant de modifier les mots de passe non autoris\u00e9s. La vuln\u00e9rabilit\u00e9, suivie comme CVE-2024-48887porte un score CVSS de 9,3 sur un maximum de 10,0. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1617048,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[274266,274265,728,4168,25646,22,79002,274264,4161,274263,6124,8055,87014,295051,58767,65,274267,5115,4160,12440,2073,769,185,238617,246491,4172,79016,4166,4164],"class_list":["post-1617047","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technologie","tag-actualites-de-piratage","tag-actualites-des-pirates","tag-changement","tag-comment-pirater","tag-corriger","tag-critique","tag-cyber-security-news","tag-cyber-security-news-aujourdhui","tag-cyber-mises-a-jour","tag-cyber-nouvelles","tag-cyberattaques","tag-exhorte","tag-fortinet","tag-fortiswitch","tag-ladministrateur","tag-les","tag-malware-ransomware","tag-mises","tag-mises-a-jour-de-la-cybersecurite","tag-mot","tag-niveau","tag-passe","tag-pour","tag-securite-de-linformation","tag-securite-du-reseau","tag-securite-informatique","tag-the-hacker-news","tag-violation-de-donnees","tag-vulnerabilite-logicielle"],"_links":{"self":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/1617047","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/comments?post=1617047"}],"version-history":[{"count":0,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/1617047\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media\/1617048"}],"wp:attachment":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media?parent=1617047"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/categories?post=1617047"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/tags?post=1617047"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}