CVE-2017-14189

Description

An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webUI to successfully log-in regardless the provided password.

Reserved 2017-09-07 | Published 2017-11-29 | Updated 2024-10-25 | Assigner fortinet

Problem types

Improper Access Control

Product status

5.8.0
affected

References

www.securityfocus.com/bid/101953 (101953) vdb-entry

fortiguard.com/advisory/FG-IR-17-248

www.securitytracker.com/id/1039892 (1039892) vdb-entry

cve.org (CVE-2017-14189)

nvd.nist.gov (CVE-2017-14189)

Download JSON