CVE-2017-7738

An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, 5.2 and below versions allow an admin user with super_admin…

published December 13, 2017

CVSS
—
EPSS
1%
Percentile
73.1
In the wild
Unconfirmed
What it is

An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, 5.2 and below versions allow an admin user with super_admin privileges to view the current SSL VPN web portal session info which may contains user credentials through the fnsysctl CLI command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01452 · 73.1th percentile
Published
2017-12-13T22:00Z
EPSS history
Timeline
  • 13 DEC 22:00Z
    An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, 5.2 and below versions allow an admin user with super_admin…
    cvelistv5