CVE-2015-1453

Published: Feb 2, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The qm class in Fortinet FortiClient 5.2.3.091 for Android uses a hardcoded encryption key of FoRtInEt!AnDrOiD, which makes it easier for attackers to obtain passwords and possibly other sensitive data by leveraging the key to decrypt data in the Shared Preferences.

Affected (1)

Products: Fortinet: Forticlient

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Fortinet Forticlient	Up to 5.2.3.091

Related CWEs

References (6)

http://seclists.org/fulldisclosure/2015/Jan/124

Source: cve@mitre.org

Exploit

http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiClient_Multiple_Vulnerabilities.pdf

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/72383

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2015/Jan/124

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiClient_Multiple_Vulnerabilities.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/72383

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.