PT-2016-7386

Name of the Vulnerable Software and Affected Versions FortiWLC versions 6.1-2-29 and earlier FortiWLC version 7.0-9-1 FortiWLC version 7.0-10-0 FortiWLC version 8.0-5-0 FortiWLC version 8.1-2-0 FortiWLC version 8.2-4-0 Description The issue concerns a hardcoded rsync account in the rsyncd server,...

FortiWLC PAM.log authenticated user information exposure

The pam.log file generated by FortiWLC contains authenticated users credentials local admin and users authenticated against external servers. Users with admin privileges can access the pam.log file and read the credentials...

FortiWLC Undocumented Hardcoded Rsync Account

FortiWLC runs a rsyncd server, historically used for High-Availability purpose. This server comes with a hardcoded account, which has read/write privileges over various parts of the system...