VYPR
← All advisories
High severity8.1NVD Advisory· Published Apr 25, 2019· Updated Jun 17, 2026

CVE-2018-1360

CVE-2018-1360

Description

A cleartext transmission of sensitive information vulnerability in Fortinet FortiManager 5.2.0 through 5.2.7, 5.4.0 and 5.4.1 may allow an unauthenticated attacker in a man in the middle position to retrieve the admin password via intercepting REST API JSON responses.

Affected products

5
  • Fortinet/Fortimanager4 versions
    cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*range: >=5.2.0,<=5.2.7
    • cpe:2.3:a:fortinet:fortimanager:5.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortimanager:5.4.1:*:*:*:*:*:*:*
    • (no CPE)range: 5.2.0 through 5.2.7, 5.4.0 and 5.4.1
  • Fortinet, Inc./Fortinet FortiManagerv5
    Range: 5.2.0 to 5.2.7

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.