CVE-2021-24024

A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and below and FortiADC 5.3.7 and below may allow a remote authenticated attacker to read other local users' password in log files...

CVE-2021-24024

A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and below and FortiADC 5.3.7 and below may allow a remote authenticated attacker to read other local users' password in log files...

Design/Logic Flaw

A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and below and FortiADC 5.3.7 and below may allow a remote authenticated attacker to read other local users' password in log files...

CVE-2021-24024

A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and below and FortiADC 5.3.7 and below may allow a remote authenticated attacker to read other local users' password in log files...

Fortinet FortiADC 日志信息泄露漏洞

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. A security vulnerability exists in FortiADCManager that originates from the insertion of a user's password into a log file in clear text. An attacker could exploit this vulnerability to obtain sensitive information...

The vulnerability of the FortiADC application delivery controller, related to deficiencies in the authentication mechanism, allows a perpetrator to trigger a service failure.

The vulnerability of the FortiADC application delivery controller is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

The vulnerability of the control panel of the FortiADC application allows a hacker to execute cross-site scripting attacks.

The vulnerability of the control panel of the FortiADC application exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the “name” parameter...

VulnCheck KEV: CVE-2018-13374

Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test request to a rogue LDAP server...

Unspecified Vulnerability in Fortinet FortiADC

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. An unspecified vulnerability exists in Fortinet FortiADC. An attacker could exploit this vulnerability to cause a denial of service...

Fortinet FortiADC Cross-Site Scripting Vulnerability (CNVD-2020-28473)

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. A cross-site scripting vulnerability exists in Fortinet FortiADC. An attacker can exploit this vulnerability to execute code or commands with the 'name' parameter...

CVE-2020-6647

An improper neutralization of input vulnerability in the dashboard of FortiADC may allow an authenticated attacker to perform a cross site scripting attack XSS via the name parameter...

CVE-2020-9286

An improper authorization vulnerability in FortiADC may allow a remote authenticated user with low privileges to perform certain actions such as rebooting the system...

CVE-2020-6647

An improper neutralization of input vulnerability in the dashboard of FortiADC may allow an authenticated attacker to perform a cross site scripting attack XSS via the name parameter...

CVE-2020-9286

An improper authorization vulnerability in FortiADC may allow a remote authenticated user with low privileges to perform certain actions such as rebooting the system...

Authorization

An improper authorization vulnerability in FortiADC may allow a remote authenticated user with low privileges to perform certain actions such as rebooting the system...

Cross site scripting

An improper neutralization of input vulnerability in the dashboard of FortiADC may allow an authenticated attacker to perform a cross site scripting attack XSS via the name parameter...

CVE-2020-6647

An improper neutralization of input vulnerability in the dashboard of FortiADC may allow an authenticated attacker to perform a cross site scripting attack XSS via the name parameter...

CVE-2020-9286

An improper authorization vulnerability in FortiADC may allow a remote authenticated user with low privileges to perform certain actions such as rebooting the system...

CVE-2020-9286

An improper authorization vulnerability in FortiADC may allow a remote authenticated user with low privileges to perform certain actions such as rebooting the system...

CVE-2020-9286

CVE-2020-9286 concerns Fortinet FortiADC. The connected documents confirm an improper authorization vulnerability where a remote authenticated user with low privileges can perform certain actions (e.g., reboot the system) on FortiADC appliances. The CVSS metrics indicate a network attacker with l...