imPC@ndo IT

Tracker / CVE-2020-15935

CVE-2020-15935

Medium 4.3

A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated attacker to retrieve some sensitive information such as users LDAP passwords and RADIUS shared secret by deobfuscating the passwords entry fields.

Affected products and versions

fortinet fortiadc · 5.0.0 → 5.4.3
fortinet fortiadc · 6.0.0 → 6.0.1

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References