Security Advisory

CVE-2016-7542

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-03-30 14:00:00
Last updated 2024-10-25 14:35:34
Assigner fortinet
State PUBLISHED

Description

A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x before 5.4.2 GA may have access to read-write administrators password hashes (not including super-admins) stored on the appliance via the webui REST API, and may therefore be able to crack them.