CVE-2017-7731

A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature.

Score

CVSS 3.0 7.5 High

Status

Modified - psirt@fortinet.com

Published

2017-05-27

Last modified

2024-10-25

Weaknesses

CWE-640

Affected products

• Fortiportal (Fortinet)
• Fortinet Fortiportal (Fortinet Inc.)

References

• https://fortiguard.com/psirt/FG-IR-17-114