Lucene search
FortiGuard LabsFG-IR-21-141HistoryJun 12, 2023 - 12:00 a.m.
FortiSIEM - Plaintext credentials storage in DB
2023-06-1200:00:00
FortiGuard Labs
www.fortiguard.com
16
fortisiem
plaintext
password
storage
vulnerability
cwe-256
attacker
user db
admin
gui
software
EPSS
0.002
Percentile
54.4%
A plaintext storage of a password vulnerability [CWE-256] in FortiSIEM may allow an attacker able to access user DB content to impersonate any admin user on the device GUI.
Related
prion
prion
Design/Logic Flaw
2023-06-13 09:15:00
cve
cve
CVE-2023-26204
2023-06-13 09:15:16
cvelist
cvelist
CVE-2023-26204
2023-06-13 08:41:46
nvd
nvd
CVE-2023-26204
2023-06-13 09:15:16