CVE-2016-7542

Published: Mar 30, 2017Modified: May 13, 2026

4.9

Vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x before 5.4.2 GA may have access to read-write administrators password hashes (not including super-admins) stored on the appliance via the webui REST API, and may therefore be able to crack them.

Affected (12)

Products: Fortinet: Fortios

Fortinet

1 product

Fortios

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortios	Version 5.2.0
Fortinet Fortios	Version 5.2.1
Fortinet Fortios	Version 5.2.2
Fortinet Fortios	Version 5.2.3
Fortinet Fortios	Version 5.2.4
Fortinet Fortios	Version 5.2.5
Fortinet Fortios	Version 5.2.6
Fortinet Fortios	Version 5.2.7
Fortinet Fortios	Version 5.2.8
Fortinet Fortios	Version 5.2.9
Fortinet Fortios	Version 5.4.0
Fortinet Fortios	Version 5.4.1