PT-2016-6030
CVE-2016-4573
·
تاريخ النشر
2016-09-09
·
تاريخ التحديث
2016-11-28
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Fortinet FortiSwitch versions 3.4.1
Description
The issue allows remote attackers to bypass authentication and gain administrative access via an empty password for the
rest admin account when the FortiSwitch models are in FortiLink managed mode.Recommendations
For version 3.4.1, consider disabling the
rest admin account until a patch is available to prevent potential exploitation. Restrict access to the administrative interface to minimize the risk of unauthorized access. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾