CVE-2015-1456

Currently unrated

Key Information:

Vendor
Fortinet
Status
Fortiauthenticator
Vendor
CVE Published:
3 February 2015

Summary

Fortinet FortiAuthenticator 3.0.0 logs the PostgreSQL usernames and passwords in cleartext, which allows remote administrators to obtain sensitive information by reading the log at debug/startup/.

References

http://packetstormsecurity.com/files/130156/Fortinet-Fort...
x_refsource_MISC
http://www.securityfocus.com/bid/72378
vdb-entryx_refsource_BID
http://www.fortiguard.com/advisory/FG-IR-15-003/
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.