Skip to content
OpenAdvisories
Unscored CVE-2018-9185 EUVD-2018-20782GHSA-429g-2fpp-h4v3

An information disclosure vulnerability in Fortinet FortiOS 6.0.0 and below versions reveals user's web portal login credentials in a Javas…

Published Jul 5, 2018 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiOS Category: Network devices

Description

An information disclosure vulnerability in Fortinet FortiOS 6.0.0 and below versions reveals user's web portal login credentials in a Javascript file sent to client-side when pages bookmarked in web portal use the Single Sign-On feature.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiOS FortiOS 6.0.0 and below —

References