Unrated severityNVD Advisory· Published Apr 25, 2019· Updated Oct 25, 2024
CVE-2018-1360
CVE-2018-1360
Description
A cleartext transmission of sensitive information vulnerability in Fortinet FortiManager 5.2.0 through 5.2.7, 5.4.0 and 5.4.1 may allow an unauthenticated attacker in a man in the middle position to retrieve the admin password via intercepting REST API JSON responses.
Affected products
2- Range: 5.2.0 - 5.2.7, 5.4.0 - 5.4.1
- Fortinet, Inc./Fortinet FortiManagerv5Range: 5.2.0 to 5.2.7
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/bid/108079mitrevdb-entryx_refsource_BID
- fortiguard.com/advisory/FG-IR-18-051mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.