CVE-2023-26204CWE-256

A plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all…

Low · published June 13, 2023

CVSS v3.1
3.6
EPSS
0%
Percentile
36.7
In the wild
Unconfirmed
What it is

A plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions may allow an attacker able to access user DB content to impersonate any admin user on the device GUI.

The record
Technical detail
CVSS v3.1
3.6 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00435 · 36.7th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2023-06-13T08:41Z
EPSS history
Timeline
  • 13 JUN 08:41Z
    A plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all…
    cvelistv5