CVE-2016-7542 | BDVDB-2026-83382 Detail

Description#

A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x before 5.4.2 GA may have access to read-write administrators password hashes (not including super-admins) stored on the appliance via the webui REST API, and may therefore be able to crack them.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-03-30Record published in the CVE List.
2. Version 22024-10-25Most recent update recorded in the CVE List.