Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0.8; and FortiOS 4.1.x before 4.1.11, 4.2.x before 4.2.16, 4.3.x before 4.3.17 and 5.0.x before 5.0.8 have a hardcoded passphrase for the Fortimanager_Access account, which allows remote attackers to obtain administrative access via an SSH session.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Fortinet FortiOS 权限许可和访问控制漏洞
Vulnerability Description
Fortinet FortiOS是美国飞塔(Fortinet)公司开发的一套专用于FortiGate网络安全平台上的安全操作系统。该系统为用户提供防火墙、防病毒、IPSec/SSL VPN、Web内容过滤和反垃圾邮件等多种安全功能。 Fortinet FortiOS 4.3.17之前4.x版本和5.0.8之前5.0.x版本中存在安全漏洞,该漏洞源于Fortimanager_Access账户使用硬编码的密码。远程攻击者可借助SSH会话利用该漏洞获取管理员访问权限。
CVSS Information
N/A
Vulnerability Type
N/A