1352 matches found
Design/Logic Flaw
A cleartext transmission of sensitive information vulnerability in Fortinet FortiManager 5.2.0 through 5.2.7, 5.4.0 and 5.4.1 may allow an unauthenticated attacker in a man in the middle position to retrieve the admin password via intercepting REST API JSON responses...
CVE-2018-1360
A cleartext transmission of sensitive information vulnerability in Fortinet FortiManager 5.2.0 through 5.2.7, 5.4.0 and 5.4.1 may allow an unauthenticated attacker in a man in the middle position to retrieve the admin password via intercepting REST API JSON responses...
CVE-2018-1360
A cleartext transmission of sensitive information vulnerability in Fortinet FortiManager 5.2.0 through 5.2.7, 5.4.0 and 5.4.1 may allow an unauthenticated attacker in a man in the middle position to retrieve the admin password via intercepting REST API JSON responses...
CVE-2018-1360
A cleartext transmission of sensitive information vulnerability in Fortinet FortiManager 5.2.0 through 5.2.7, 5.4.0 and 5.4.1 may allow an unauthenticated attacker in a man in the middle position to retrieve the admin password via intercepting REST API JSON responses...
CVE-2018-1360
Fortinet FortiManager 5.2.x (<=5.2.7) and 5.4.x (
CVE-2018-1360
A cleartext transmission of sensitive information vulnerability in Fortinet FortiManager 5.2.0 through 5.2.7, 5.4.0 and 5.4.1 may allow an unauthenticated attacker in a man in the middle position to retrieve the admin password via intercepting REST API JSON responses...
FortiManager Unencrypted Password Vulnerability
A cleartext transmission of sensitive information vulnerability in FortiManager may allow an unauthenticated attacker in a man in the middle position to retrieve the admin password via intercepting REST API JSON responses...
Cross-site scripting (XSS) vulnerability via DHCP Hostname parameter
An attacker could send DHCP request containing malicious scripts in the HOSTNAME parameter. The malicious script code is executed while viewing the logs in FortiAnalyzer and FortiManager with FortiAnalyzer feature enabled...
The vulnerability of the FortiManager system’s operating system, FortiOS, allows a perpetrator to carry out a “man-in-the-middle” attack, gain access to protected information, and redirect network traffic.
The vulnerability of the FortiManager operating system’s FortiOS component lies in the possibility of using weak encryption algorithms. Exploiting this vulnerability allows a malicious actor, operating remotely, to carry out a “man-in-the-middle” attack, gain access to protected information, and...
The vulnerability of the FortiManager system’s operating system, FortiOS, allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the FortiManager system’s FortiOS operating system arises from errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures remotely...
CVE-2018-1353
An information disclosure vulnerability in Fortinet FortiManager 6.0.1 and below versions allows a standard user with adom assignment read the interface settings of vdoms unrelated to the assigned adom...
CVE-2018-1353
An information disclosure vulnerability in Fortinet FortiManager 6.0.1 and below versions allows a standard user with adom assignment read the interface settings of vdoms unrelated to the assigned adom...
Information disclosure
An information disclosure vulnerability in Fortinet FortiManager 6.0.1 and below versions allows a standard user with adom assignment read the interface settings of vdoms unrelated to the assigned adom...
CVE-2018-1353
Fortinet FortiManager vulnerability CVE-2018-1353 affects FortiManager 6.0.1 and earlier. A standard user with an ADOM assignment can read interface settings of VDOMs unrelated to the assigned ADOM, resulting in information disclosure. The underlying issue is improper access control across ADOM-s...
CVE-2018-1353
An information disclosure vulnerability in Fortinet FortiManager 6.0.1 and below versions allows a standard user with adom assignment read the interface settings of vdoms unrelated to the assigned adom...
Fortinet FortiManager < 6.0.2 Information Disclosure Vulnerability (FG-IR-18-016)
The version of FortiManager running on the remote device is prior to 6.0.2. It is, therefore, affected by an information disclosure vulnerability. A user with an adom assignment can potentially read the settings of other vdoms. C Tenable Network Security, Inc. include"compat.inc"; if description...
FortiManager allows unauthorized viewing of vdoms settings by any adom standard users
A standard user with adom assignment can read the interface settings of vdoms unrelated to his/her adom...
Cross site scripting
A Cross-site Scripting XSS vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows inject Javascript code and HTML tags through the CN value of CA and CRL certificates via the import CA and CRL certificates feature...
CVE-2017-17541
A Cross-site Scripting XSS vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows inject Javascript code and HTML tags through the CN value of CA and CRL certificates via the import CA and CRL certificates feature...
CVE-2017-17541
A Cross-site Scripting XSS vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows inject Javascript code and HTML tags through the CN value of CA and CRL certificates via the import CA and CRL certificates feature...