CVE-2016-7561: Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user credentials by reading…

PriorityP432high7.2CVSS 3.0

AVNACLPRHUINSUCHIHAH

EPSS

1.11%

62.2th percentile

Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user credentials by reading the pam.log file.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortiwlc	<= 6.1-2-29	—
fortinet	fortiwlc	—	—
fortinet	fortiwlc	—	—
fortinet	fortiwlc	—	—
fortinet	fortiwlc	—	—
fortinet	fortiwlc	—	—

CVSS provenance

nvdv3.07.2HIGHCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.