EUVD-2021-22799

Malware in sbrugna...

CVE-2021-36178

A insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below allows attacker to disclose third-party devices credential information via configuration page lookup...

CVE-2021-36178

A insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below allows attacker to disclose third-party devices credential information via configuration page lookup...

CVE-2021-36178

A insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below allows attacker to disclose third-party devices credential information via configuration page lookup...

Information disclosure

A insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below allows attacker to disclose third-party devices credential information via configuration page lookup...

CVE-2021-36178

CVE-2021-36178 affects Fortinet FortiSDNConnector (versions 1.1.7 and earlier). The root cause is insufficient protection of credentials, enabling an attacker with low privileges and network access to disclose third‑party device credentials by performing a configuration page lookup in the WebUI. ...

CVE-2021-36178

A insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below allows attacker to disclose third-party devices credential information via configuration page lookup...

CVE-2021-36178

A insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below allows attacker to disclose third-party devices credential information via configuration page lookup...

FortiSDNConnector - Credential leak

An insufficiently protected credentials vulnerability CWE-522 in FortiSDNConnector may allow an authenticated user to obtain third party device credentials via visiting the configuration page in the WebUI...

Fortinet FortiSDNConnector 安全漏洞

Fortinet FortiSdnConnector is used to bridge Sdn controllers and Fortinet devices including FortiGate and FortiManager from Fortinet USA. A security vulnerability exists in Fortinet FortiSDNConnector versions 1.1.7 and below, which can be exploited by an attacker to disclose third-party device...