CVE-2017-7342

Summary

A weak password recovery process vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via a hidden Close button

Affected Software

VendorProductVersion RangeStatus
Fortinet, Inc.Fortinet FortiPortalFortiPortal versions 4.0.0 and belowaffected

Weaknesses

  • Password

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References