PT-2017-3354
CVE-2017-14189
·
تاريخ النشر
2017-11-22
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
FortiWebManager version 5.8.0
Description
The issue is related to an improper access control in the admin webUI, allowing unauthorized access to the system using the admin account, regardless of the password provided. This can be exploited by a remote attacker with access to the web interface, potentially leading to unauthorized system access.
Recommendations
For FortiWebManager version 5.8.0, consider restricting access to the admin webUI until a fix is available. As a temporary workaround, limit the use of the admin account to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾