Lucene search

K
fortinetFortiGuard LabsFG-IR-18-382
HistoryMar 29, 2019 - 12:00 a.m.

FortiSIEM LDAP server password reflected in admin portal

2019-03-2900:00:00
FortiGuard Labs
www.fortiguard.com
10

EPSS

0.001

Percentile

34.0%

An information exposure vulnerability in the admin portal of FortiSIEM may allow an authenticated admin to retrieve the LDAP server password via the HTML source code. This could potentially aggravate attacks targeting the authenticated admin session, should they exist (XSS, social engineering, proxy caching…).

EPSS

0.001

Percentile

34.0%

Related for FG-IR-18-382