PT-2017-17918
CVE-2017-7737
·
Published
2017-08-10
·
Updated
2019-10-03
Description by
CVSS 3.1
4.9
MediumMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Fortinet FortiWeb versions 5.8.2 and below
Description
The issue allows a logged-in admin user to view the SNMPv3 user password in cleartext in the web UI via the HTML source code, potentially leading to information disclosure.
Recommendations
For Fortinet FortiWeb versions 5.8.2 and below, update to a version above 5.8.2 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾