CVE-2017-7737 — Sensitive Information Exposure in Fortinet Fortiweb

CWE-200 — Sensitive Information ExposureCWE-552 — Files or Directories Accessible to External Parties4 documents4 sources
Severity
4.9MEDIUMNVD
EPSS
0.4%
top 40.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Fortinet FortiwebFortinet INC Fortinet Fortiweb
Timeline
PublishedAug 10
Latest updateMay 13

Description

An information disclosure vulnerability in Fortinet FortiWeb 5.8.2 and below versions allows logged-in admin user to view SNMPv3 user password in cleartext in webui via the HTML source code.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 1.2 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5fortinet_inc/fortinet_fortiwebFortiWeb 5.8.2 and below versions.

🔴Vulnerability Details

2
GHSA
GHSA-9vvf-5cpp-647j: An information disclosure vulnerability in Fortinet FortiWeb 5↗2022-05-13
▶
CVEList
CVE-2017-7737: An information disclosure vulnerability in Fortinet FortiWeb 5↗2017-08-10
▶

📋Vendor Advisories

1
Fortinet
An information disclosure vulnerability in Fortinet FortiWeb 5.8.2 and below versions allows logged-in admin user to vie...↗2017-08-10
▶
CVE-2017-7737 — Sensitive Information Exposure | cvebase