CVE-2017-14185

An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal users to access…

published May 25, 2018

CVSS
—
EPSS
1%
Percentile
70.0
In the wild
Unconfirmed
What it is

An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal users to access internal FortiOS configuration information (eg:addresses) via specifically crafted URLs inside the SSL-VPN web portal.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01290 · 70.0th percentile
Published
2018-05-25T16:00Z
EPSS history
Timeline
  • 25 MAY 16:00Z
    An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal users to access…
    cvelistv5