5.3
Moyenne
CVE-2019-17655 A cleartext storage in a file or on disk (CWE-313) vulnerability in FortiOS SSL VPN 6.2.0 through 6.2.2, 6.0.9 and…
Description
A cleartext storage in a file or on disk (CWE-313) vulnerability in FortiOS SSL VPN 6.2.0 through 6.2.2, 6.0.9 and earlier and FortiProxy 2.0.0, 1.2.9 and earlier may allow an attacker to retrieve a logged-in SSL VPN user's credentials should that attacker be able to read the session file stored on the targeted device's system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Fortinet FortiOS and FortiProxy | Versions non publiées |
Références
- fortiguard.com fortiguard.com
- fortiguard.com fortiguard.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Fortinet FortiOS and FortiProxy
Les 4 CVE de Fortinet FortiOS and FortiProxy →
CVE-2018-13381
A buffer overflow vulnerability in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.7, 5.4 and earlier versions…
5.3
Moyenne
CVE-2018-13380
A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2…
4.7
Moyenne
CVE-2018-13383
Fortinet FortiOS and FortiProxy Out-of-bounds Write
4.3
Moyenne