CVE-2015-1455

Currently unrated

Key Information:

Vendor
Fortinet
Status
Fortiauthenticator
Vendor
CVE Published:
3 February 2015

Summary

Fortinet FortiAuthenticator 3.0.0 has a password of (1) slony for the slony PostgreSQL user and (2) www-data for the www-data PostgreSQL user, which makes it easier for remote attackers to obtain access via unspecified vectors.

References

http://packetstormsecurity.com/files/130156/Fortinet-Fort...
x_refsource_MISC
http://www.securityfocus.com/bid/72378
vdb-entryx_refsource_BID
http://www.fortiguard.com/advisory/FG-IR-15-003/
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.