A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an attacker to access Fortinet private testing data via the use of static credentials.
2023-11-14T19:15:30.890
2024-11-21T08:20:01.620
Modified
CVSSv3.1: 4.1 (MEDIUM)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | fortinet | fortianalyzer | ≤ 7.0.10 | Yes |
Application | fortinet | fortianalyzer | ≤ 7.2.3 | Yes |
Application | fortinet | fortianalyzer | 7.4.0 | Yes |
Application | fortinet | fortimanager | ≤ 7.0.10 | Yes |
Application | fortinet | fortimanager | ≤ 7.2.3 | Yes |
Application | fortinet | fortimanager | 7.4.0 | Yes |