Lucene search
HistoryFeb 02, 2015 - 4:59 p.m.
CVE-2015-1453
cve-2015-1453
fortinet
forticlient
android
hardcoded encryption key
data decryption
shared preferences
security vulnerability
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
53.4%
The qm class in Fortinet FortiClient 5.2.3.091 for Android uses a hardcoded encryption key of FoRtInEt!AnDrOiD, which makes it easier for attackers to obtain passwords and possibly other sensitive data by leveraging the key to decrypt data in the Shared Preferences.
Affected configurations
Node
fortinetforticlientRange≤5.2.3.091android
| CPE | Name | Operator | Version |
|---|---|---|---|
| fortinet:forticlient | fortinet forticlient | le | 5.2.3.091 |
Related
nvd
nvd
CVE-2015-1453
2015-02-02 16:59:06
cvelist
cvelist
CVE-2015-1453
2015-02-02 16:00:00
fortinet
fortinet
FortiClient Android and iOS multiple vulnerabilities
2015-02-25 00:00:00
prion
prion
Hardcoded credentials
2015-02-02 16:59:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
53.4%
Related for CVE-2015-1453