CVE-2015-1455

Name of the Vulnerable Software and Affected Versions Fortinet FortiAuthenticator version 3.0.0

Description The issue concerns default passwords for PostgreSQL users in Fortinet FortiAuthenticator. Specifically, the slony PostgreSQL user has a password of slony, and the www-data PostgreSQL user has a password of www-data. This makes it easier for remote attackers to obtain access.

Recommendations For Fortinet FortiAuthenticator version 3.0.0, change the default passwords for the slony and www-data PostgreSQL users to strong, unique passwords to prevent unauthorized access.