CVE-2017-14189

An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webUI to successfully log-in regardless the provided password.

Score

CVSS 3.0 9.8 Critical

Status

Modified - psirt@fortinet.com

Published

2017-11-29

Last modified

2024-10-25

Weaknesses

CWE-284, CWE-521

Affected products

• Fortiweb Manager (Fortinet)
• Fortiwebmanager (Fortinet Inc.)

References

• http://www.securityfocus.com/bid/101953
• http://www.securitytracker.com/id/1039892
• https://fortiguard.com/advisory/FG-IR-17-248