Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an attacker to access Fortinet private testing data via the use of static credentials.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
使用硬编码的凭证
Vulnerability Title
Fortinet FortiAnalyzer 安全漏洞
Vulnerability Description
Fortinet FortiAnalyzer是美国飞塔（Fortinet）公司的一套集中式网络安全报告解决方案。该产品主要用于收集网络日志数据，并通过报告套件对日志中的安全事件、网络流量、Web内容等进行分析、报告、归档操作。 Fortinet FortiAnalyzer 和 FortiManager 存在安全漏洞，该漏洞源于利用硬编码凭证漏洞。攻击者通过使用静态凭证访问 Fortinet 私人测试数据。
CVSS Information
N/A
Vulnerability Type
N/A