Information disclosure

2021-10-0610:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

A insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below allows attacker to disclose third-party devices credential information via configuration page lookup.

CPENameOperatorVersion
fortisdnconnectorlt1.1.8

CPE	Name	Operator	Version
	fortisdnconnector	lt	1.1.8

References

fortiguard.com/advisory/FG-IR-20-183