CVE

Id
91392  
CVE No.
CVE-2016-4573  
Status
Candidate  
Description
Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE models, when in FortiLink managed mode and upgraded to 3.4.1, might allow remote attackers to bypass authentication and gain administrative access via an empty password for the rest_admin account.  
Phase
Assigned (20160510)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
785142 91392 CVE-2016-4573 MISC:https://www.themissinglink.com.au/security/advisories/cve-2016-4573  View
785143 91392 CVE-2016-4573 CONFIRM:http://fortiguard.com/advisory/fortiswitch-rest-admin-account-exposed-under-specific-conditions  View
785144 91392 CVE-2016-4573 BID:92450  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
175 JVNDB-2016-000182 baserCMS 用プラグイン「メールフォーム」におけるクロスサイトリクエストフォージェリの脆弱性 baserCMSユーザー会が提供する baserCMS は、オープンソースのコンテンツ管理システムです。baserCMS 用プラグイン「メールフォーム」には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2016-4886 91392 2.6 4.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000182.html  View