Lucene search

K
fortinetFortiGuard LabsFG-IR-20-044
HistoryNov 02, 2021 - 12:00 a.m.

Multiple Products - Retrieval of sensitive information in cleartext via GUI

2021-11-0200:00:00
FortiGuard Labs
www.fortiguard.com
17
fortiadc
fortisiem
fortiddos
gui
sensitive information
ldap passwords
radius shared secret
elastic cloud database

EPSS

0.001

Percentile

35.3%

A cleartext storage of sensitive information in the GUI of FortiADC, FortiSIEM, FortiDDoS, FortiDDoS-CM and FortiDDoS-F may allow a remote authenticated attacker to retrieve some sensitive information such as users LDAP passwords, RADIUS shared secret and the Elastic Cloud database password by deobfuscating the passwords entry fields.

EPSS

0.001

Percentile

35.3%

Related for FG-IR-20-044