Skip to content
OpenAdvisories
Medium · 4.3 CVE-2021-36178 EUVD-2021-22799GHSA-9jhj-hc6j-2fqm

A insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below allows attacker to disclose third-party device…

Published Oct 6, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiSDNConnector Category: Network devices

Description

A insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below allows attacker to disclose third-party devices credential information via configuration page lookup.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiSDNConnector FortiSDNConnector 1.1.7, 1.1.6, 1.1.5, 1.1.4, 1.1.3, 1.1.2, 1.1.1, 1.1.0, 1.0.0 —

References