Unscored CVE-2017-7731 EUVD-2017-16706GHSA-8gqm-crwv-8r3m

A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure…

Published May 26, 2017 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiPortal Category: Network devices

Description

A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature.

Affected products

Vendor	Product	Affected	Fixed
Fortinet	Fortinet FortiPortal	FortiPortal versions 4.0.0 and below	—

References

https://fortiguard.com/psirt/FG-IR-17-114