Lucene search
FortiGuard LabsFG-IR-17-172HistoryDec 08, 2017 - 12:00 a.m.
SSL VPN Web Portal user credentials may be leaked to super_admins
2017-12-0800:00:00
FortiGuard Labs
www.fortiguard.com
16
EPSS
0.001
Percentile
32.2%
An admin user with super_admin privileges (i.e. with a super_admin profile) may view the current sslvpn web portal session info, using the fnsysctl CLI command. This info includes user credentials.
Related
nvd
nvd
CVE-2017-7738
2017-12-13 22:29:00
cvelist
cvelist
CVE-2017-7738
2017-12-13 22:00:00
prion
prion
Information disclosure
2017-12-13 22:29:00
cve
cve
CVE-2017-7738
2017-12-13 22:29:00
