CVE-2015-7363

CVE-2015-7363 covers a stored XSS in the Fortinet FortiManager/FortiAnalyzer advanced settings page through report filters. Affected are FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.3, and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.3. The vulnerability allows a remote administrat...

CVE-2016-7561

Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user credentials by reading the pam.log file...

CVE-2016-7561

Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user credentials by reading the pam.log file...

CVE-2016-7560

The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote attackers to read or write to arbitrary files via unspecified vectors...

CVE-2016-7560

The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote attackers to read or write to arbitrary files via unspecified vectors...

Hardcoded credentials

The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote attackers to read or write to arbitrary files via unspecified vectors...

Design/Logic Flaw

Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user credentials by reading the pam.log file...

CVE-2016-7561

CVE-2016-7561 affects Fortinet FortiWLC: versions 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0. The issue allows administrators to obtain sensitive user credentials by reading the pam.log file. The connected documents confirm this information exposure vector and list a F...

CVE-2016-7560

CVE-2016-7560 affects Fortinet FortiWLC: the rsyncd server in FortiWLC versions up to 8.2-4-0 uses a hardcoded rsync account, enabling remote attackers to read or write arbitrary files via unspecified vectors. This vulnerability stems from the hardcoded credential/account in the rsync service, wi...

CVE-2016-7561

Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user credentials by reading the pam.log file...

CVE-2016-7560

The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote attackers to read or write to arbitrary files via unspecified vectors...

CVE-2016-7561: Exposure of Sensitive Information to an Unauthorized Actor

Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user credentials by reading the pam.log file...

PT-2016-7387

Name of the Vulnerable Software and Affected Versions Fortinet FortiWLC versions 6.1-2-29 and earlier Fortinet FortiWLC version 7.0-9-1 Fortinet FortiWLC version 7.0-10-0 Fortinet FortiWLC version 8.0-5-0 Fortinet FortiWLC version 8.1-2-0 Fortinet FortiWLC version 8.2-4-0 Description The issue...

CVE-2016-7560: Use of Hard-coded Credentials

The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote attackers to read or write to arbitrary files via unspecified vectors...

Fortinet FortiClient DLL Loading Remote Code Execution Vulnerability

Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. A remote code execution vulnerability exists in Fortinet FortiClient. A remote attacker can exploit the vulnerability to execute arbitrary code in the context of t...

Fortinet FortiClient Local Information Disclosure Vulnerability

Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. A local information disclosure vulnerability exists in Fortinet FortiClient. A local attacker could exploit the vulnerability to obtain sensitive information...

Leaked NSA Hacking Tools Were 'Mistakenly' Left By An Agent On A Remote Server

If you are a hacker, you might have enjoyed the NSA's private zero-day exploits, malware and hacking tools that were leaked last month. But the question is: How these hacking tools ended up into the hands of hackers? It has been found that the NSA itself was not directly hacked, but a former NSA...

CVE-2016-4969

Cross-site scripting XSS vulnerability in Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via the IP parameter to script/statistics/getconn.php...

CVE-2016-4968

The linkreport/tmp/adminglobal page in Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users to discover administrator cookies via a GET request...

CVE-2016-4967

Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users to obtain sensitive information from 1 a backup of the device configuration via script/cfgshow.php or 2 PCAP files via script/system/tcpdump.php...