Vulnerability: Unauthorized Access to Read-Write Administrator Password Hashes on Fortinet Devices

Vulnerability: Unauthorized Access to Read-Write Administrator Password Hashes on Fortinet Devices

CVE-2016-7542 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:N/A:N

A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x before 5.4.2 GA may have access to read-write administrators password hashes (not including super-admins) stored on the appliance via the webui REST API, and may therefore be able to crack them.

Learn more about our Cis Benchmark Audit For Apple Ios.