Skip to content
Sign in
4.3 Medium

CVE-2020-15935 A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a…

Description

A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated attacker to retrieve some sensitive information such as users LDAP passwords and RADIUS shared secret by deobfuscating the passwords entry fields.

Affected products and versions

Product Affected versions Fixed in
Fortinet FortiADC Versions not published

Other CVEs of Fortinet FortiADC

The 7 CVEs of Fortinet FortiADC →
CVE-2022-35851 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC management interface… 8.0 High CVE-2022-38381 An improper handling of malformed request vulnerability [CWE-228] exists in FortiADC 5.0 all versions, 6.0.0 all… 5.3 Medium CVE-2022-38374 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiADC 7.0.0 -… 8.8 High CVE-2022-27484 A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x.x allows an… 5.4 Medium
Track this CVE