CVE-2016-7542

2017-03-3014:00:00

fortinet

www.cve.org

AI Score

5.1

Confidence

High

EPSS

0.002

Percentile

59.2%

JSON

A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x before 5.4.2 GA may have access to read-write administrators password hashes (not including super-admins) stored on the appliance via the webui REST API, and may therefore be able to crack them.

CNA Affected

[
  {
    "product": "FortiOS",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "5.2.0 - 5.2.9, 5.4.1"
      }
    ]
  }
]