Sensitive Information Disclosure in Fortinet FortiAuthenticator
CVE-2015-1456

Currently unrated

Key Information:

Vendor: Fortinet
Status: Fortiauthenticator
Vendor: CVE Published:; 3 February 2015

What is CVE-2015-1456?

Fortinet FortiAuthenticator 3.0.0 has a vulnerability that allows the storage of PostgreSQL usernames and passwords in cleartext format. This issue permits unauthorized access to sensitive information via logs located at debug/startup/. Remote administrators can exploit this flaw to gain critical insights into credentials, potentially compromising security and leading to unauthorized access to affected systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch