NVD

Id
23769  
Name
CVE-2015-1455  
Description
Fortinet FortiAuthenticator 3.0.0 has a password of (1) slony for the slony PostgreSQL user and (2) www-data for the www-data PostgreSQL user, which makes it easier for remote attackers to obtain access via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-02-03  
Modified Date
2015-02-19  
Seq
2015-1455  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
126363 23769 CVE-2015-1455 http://packetstormsecurity.com/files/130156/Fortinet-FortiAuthenticator-XSS-Disclosure-Bypass.html  View
126364 23769 CVE-2015-1455 http://www.fortiguard.com/advisory/FG-IR-15-003/  View
126365 23769 CVE-2015-1455 http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiAuthenticator_Multiple_Vulnerabilities.pdf  View
126366 23769 CVE-2015-1455 72378  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6118 JVNDB-2015-001438 Fortinet FortiAuthenticator におけるアクセス権を取得される脆弱性 Fortinet FortiAuthenticator は、(1) slony PostgreSQL ユーザ用に slony、および (2) www-data PostgreSQL ユーザ用に www-data のパスワードを使用するため、アクセス権を取得される脆弱性が存在します。 CVE-2015-1455 78680 CVE-2015-1455 23769 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001438.html 2015-01-29 2015-03-02 View