Information disclosure

2018-07-0513:29:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.6%

JSON

An information disclosure vulnerability in Fortinet FortiOS 6.0.0 and below versions reveals user’s web portal login credentials in a Javascript file sent to client-side when pages bookmarked in web portal use the Single Sign-On feature.

CPENameOperatorVersion
fortiosle6.0.0

CPE	Name	Operator	Version
	fortios	le	6.0.0

References

www.securityfocus.com/bid/104535

www.securitytracker.com/id/1041186

fortiguard.com/advisory/FG-IR-18-027