Description
Fortinet FortiAuthenticator 3.0.0 has a password of (1) slony for the slony PostgreSQL user and (2) www-data for the www-data PostgreSQL user, which makes it easier for remote attackers to obtain access via unspecified vectors.
References (4)
Core 4
Core References
Exploit, Third Party Advisory x_refsource_misc
http://packetstormsecurity.com/files/130156/Fortinet-FortiAuthenticator-XSS-Disclosure-Bypass.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/72378
Vendor Advisory x_refsource_confirm
http://www.fortiguard.com/advisory/FG-IR-15-003/
Vendor Advisory x_refsource_misc
http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiAuthenticator_Multiple_Vulnerabilities.pdf
Scores
EPSS
0.0071
EPSS Percentile
72.5%
Details
CWE
CWE-255
Status
published
Products (1)
fortinet/fortiauthenticator
3.0.0
Published
Feb 03, 2015
Tracked Since
Feb 18, 2026