Tracker / CVE-2017-7738
CVE-2017-7738
High 7.2
An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, 5.2 and below versions allow an admin user with super_admin privileges to view the current SSL VPN web portal session info which may contains user credentials through the fnsysctl CLI command.
Affected products and versions
| fortinet | fortios · … → 5.2 |
|---|---|
| fortinet | fortios · 5.4.0 → 5.4.5 |
| fortinet | fortios · 5.6.0 → 5.6.2 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.