Lucene search
FortiGuard LabsFG-IR-19-217HistorySep 07, 2021 - 12:00 a.m.
Protect
2021-09-0700:00:00
FortiGuard Labs
www.fortiguard.com
16
cleartext storage
fortios
ssl vpn
vulnerability
attacker
user credentials
EPSS
0.002
Percentile
55.1%
A cleartext storage in a file or on disk (CWE-313) vulnerability in FortiOS SSL VPN may allow an attacker to retrieve a logged-in SSL VPN user’s credentials should that attacker be able to read the session file stored on the targeted device’s system.
Related
cvelist
cvelist
CVE-2019-17655
2020-06-16 20:14:55
nessus
nessus
Fortinet FortiOS < 6.2.3 Multiple Vulnerabilities (FG-IR-19-217)
2020-01-30 00:00:00
prion
prion
Session fixation
2020-06-16 21:15:00
cve
cve
CVE-2019-17655
2020-06-16 21:15:10
nvd
nvd
CVE-2019-17655
2020-06-16 21:15:10
fortinet
fortinet
FortiProxy SSL VPN user credential plaintext storage
2021-03-02 00:00:00