FortiManager Unencrypted Password Vulnerability

2019-04-2300:00:00

FortiGuard Labs

www.fortiguard.com

0.002 Low

EPSS

Percentile

53.3%

JSON

A cleartext transmission of sensitive information vulnerability in FortiManager may allow an unauthenticated attacker in a man in the middle position to retrieve the admin password via intercepting REST API JSON responses.

CPENameOperatorVersion
fortimanagereq5.4.1
fortimanagereq5.4.0
fortimanagereq5.2.7
fortimanagereq5.2.6
fortimanagereq5.2.5
fortimanagereq5.2.4
fortimanagereq5.2.3
fortimanagereq5.2.2
fortimanagereq5.2.1
fortimanagereq5.2.0

Name	Operator	Version
fortimanager	eq	5.4.1
fortimanager	eq	5.4.0
fortimanager	eq	5.2.7
fortimanager	eq	5.2.6
fortimanager	eq	5.2.5
fortimanager	eq	5.2.4
fortimanager	eq	5.2.3
fortimanager	eq	5.2.2
fortimanager	eq	5.2.1
fortimanager	eq	5.2.0

0.002 Low

EPSS

Percentile

53.3%

JSON

Related for FG-IR-18-051