CVE-2017-14189

Name of the Vulnerable Software and Affected Versions FortiWebManager version 5.8.0

Description The issue is related to an improper access control in the admin webUI, allowing unauthorized access to the system using the admin account, regardless of the password provided. This can be exploited by a remote attacker with access to the web interface, potentially leading to unauthorized system access.

Recommendations For FortiWebManager version 5.8.0, consider restricting access to the admin webUI until a fix is available. As a temporary workaround, limit the use of the admin account to minimize the risk of exploitation.