FortiWeb SNMPv3 user password viewable in HTML source code

2017-08-1100:00:00

FortiGuard Labs

www.fortiguard.com

0.001 Low

EPSS

Percentile

26.4%

JSON

The HTML source code of the FortiWeb SNMPv3 user edit webui page includes the user’s password in cleartext.

CPENameOperatorVersion
fortiwebeq5.8.2
fortiwebeq5.8.1
fortiwebeq5.8.0
fortiwebeq5.7.3
fortiwebeq5.7.2
fortiwebeq5.7.1
fortiwebeq5.7.0
fortiwebeq5.6.2
fortiwebeq5.6.1
fortiwebeq5.6.0

Name	Operator	Version
fortiweb	eq	5.8.2
fortiweb	eq	5.8.1
fortiweb	eq	5.8.0
fortiweb	eq	5.7.3
fortiweb	eq	5.7.2
fortiweb	eq	5.7.1
fortiweb	eq	5.7.0
fortiweb	eq	5.6.2
fortiweb	eq	5.6.1
fortiweb	eq	5.6.0

Rows per page:

1-10 of 191

0.001 Low

EPSS

Percentile

26.4%

JSON

Related for FG-IR-17-162