Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-98183
HistoryNov 17, 2023 - 12:00 a.m.

Fortinet FortiClient Hardcoding Vulnerability

2023-11-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
20
fortinet
endpoint security
ipsec
ssl encryption
wan optimization
compliance
two-factor authentication
fortigate
firewall
hard-coded credentials
vulnerability
system protection
static credentials
cnvd

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A hard-coded vulnerability exists in Fortinet FortiClient Windows that stems from the presence of hard-coded credentials in the application. An attacker could exploit the vulnerability to bypass system protection through the use of static credentials.

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for CNVD-2023-98183