CVE-2015-1453 | BDVDB-2026-67818 Detail

Description#

The qm class in Fortinet FortiClient 5.2.3.091 for Android uses a hardcoded encryption key of FoRtInEt!AnDrOiD, which makes it easier for attackers to obtain passwords and possibly other sensitive data by leveraging the key to decrypt data in the Shared Preferences.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiClient_Multiple_Vulnerabilities.pdf
http://seclists.org/fulldisclosure/2015/Jan/124
http://www.securityfocus.com/bid/72383

Exploit#

No public exploit known

History#

Version 12015-02-02Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.