Skip to content
OpenAdvisories
Unscored CVE-2017-7342 EUVD-2017-16369GHSA-j6v6-8927-hv9w

A weak password recovery process vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized …

Published Mar 25, 2019 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiPortal Category: Network devices

Description

A weak password recovery process vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via a hidden Close button

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiPortal FortiPortal versions 4.0.0 and below —

References