CVE-2017-7737

2017-08-1021:00:00

fortinet

www.cve.org

AI Score

Confidence

High

EPSS

0.001

Percentile

26.2%

JSON

An information disclosure vulnerability in Fortinet FortiWeb 5.8.2 and below versions allows logged-in admin user to view SNMPv3 user password in cleartext in webui via the HTML source code.

CNA Affected

[
  {
    "product": "Fortinet FortiWeb",
    "vendor": "Fortinet, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "FortiWeb 5.8.2 and below versions."
      }
    ]
  }
]

References

www.securityfocus.com/bid/100205

fortiguard.com/advisory/FG-IR-17-162