CVE-2017-7738

CVE-2017-7738: vulnerability in Fortinet, Inc. FortiOS

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%
exploitation probability
1.5%top 27% of all CVEs
observed exploitation
nono source reports it
An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, 5.2 and below versions allow an admin user with super_admin privileges to view the current SSL VPN web portal session info which may contains user credentials through the fnsysctl CLI command.
Affected products
Fortinet, Inc. · FortiOS
Related CVEs — Fortinet, Inc. FortiOS

In the same product, most dangerous first.

CVE-2017-14186—CVE-2017-14186EPSS 3.7%CVE-2017-14185—CVE-2017-14185EPSS 1.3%CVE-2018-9194—CVE-2018-9194EPSS 1.1%CVE-2018-9192—CVE-2018-9192EPSS 1.1%CVE-2017-7739—CVE-2017-7739EPSS 1.1%CVE-2017-14190—CVE-2017-14190EPSS 1.1%
References
https://fortiguard.com/advisory/FG-IR-17-172http://www.securityfocus.com/bid/102151