Security Advisory

CVE-2017-14185

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-05-25 16:00:00
Last updated 2024-10-25 14:31:46
Assigner fortinet
State PUBLISHED

Description

An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal users to access internal FortiOS configuration information (eg:addresses) via specifically crafted URLs inside the SSL-VPN web portal.