CVE
- Id
- 94362
- CVE No.
- CVE-2016-7542
- Status
- Candidate
- Description
- A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x before 5.4.2 GA may have access to read-write administrators password hashes (not including super-admins) stored on the appliance via the webui REST API, and may therefore be able to crack them.
- Phase
- Assigned (20160909)
- Votes
- None (candidate not yet proposed)
- Comments