PostgreSQL User Credential Vulnerability in Fortinet FortiAuthenticator
CVE-2015-1455

Currently unrated

Key Information:

Vendor: Fortinet
Status: Fortiauthenticator
Vendor: CVE Published:; 3 February 2015

What is CVE-2015-1455?

Fortinet FortiAuthenticator version 3.0.0 contains a significant vulnerability where the default passwords for the 'slony' and 'www-data' PostgreSQL users are set to easily guessable values. This weak security practice allows remote attackers to exploit these credentials to gain unauthorized access, potentially compromising the system's operations and data integrity. Organizations using this version are advised to apply necessary patches and update user credentials to mitigate risks associated with remote exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch