Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-15935 EUVD-2020-7906GHSA-j26f-vqgh-5h66

A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated …

Published Nov 2, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Description

A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated attacker to retrieve some sensitive information such as users LDAP passwords and RADIUS shared secret by deobfuscating the passwords entry fields.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiADC FortiADC 5.4.3 6.0.0 —

References