← Back

Fortiauthenticator

fortiauthenticator

Vendor: Fortinet • 23 CVEs

CVEs (23)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Fortinet
1Fortiauthenticator
May 6, 2026
Feb 3, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Fortinet FortiAuthenticator 3.0.0 logs the PostgreSQL usernames and passwords in cleartext, which allows remote administrators to obtain sensitive information by reading the log at debug/startup/.
1Fortinet
1Fortiauthenticator
May 6, 2026
Feb 3, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
Fortinet FortiAuthenticator 3.0.0 has a password of (1) slony for the slony PostgreSQL user and (2) www-data for the www-data PostgreSQL user, which makes it easier for remote attackers to obtain access via unspecified v...Show more
Fortinet FortiAuthenticator 3.0.0 has a password of (1) slony for the slony PostgreSQL user and (2) www-data for the www-data PostgreSQL user, which makes it easier for remote attackers to obtain access via unspecified vectors.Show less
1Fortinet
1Fortiauthenticator
May 6, 2026
Apr 30, 2014
N/A· v4
N/A· v3
9.0 HIGH· v2
FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface.