CVE-2017-14189

Summary: CVE-2017-14189 affects Fortinet FortiWebManager 5.8.0 where the admin login fails to verify the provided password, allowing login access to anyone who can reach the admin WebUI. The root cause is an improper access-control check in the login process. Public references include the FortiGu...

CVE-2017-14189: Weak Password Requirements

An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webUI to successfully log-in regardless the provided password...

PT-2017-3354

Name of the Vulnerable Software and Affected Versions FortiWebManager version 5.8.0 Description The issue is related to an improper access control in the admin webUI, allowing unauthorized access to the system using the admin account, regardless of the password provided. This can be exploited by ...

FortiWebManager 5.8.0 improperly handles admin login access

FortiWebManager 5.8.0 fails to check the admin password, granting access regardless the provided string...