[ authorization ] [ registration ] [ Wiederherstellen ]
Kontaktiere uns
You can contact us by:
0day.today Exploits Market and 0day Exploits Database

Fortinet FortiClient VPN Credential Disclosure Vulnerability

[ 0Day-ID-29224 ]
Gesamte Überschrift
Fortinet FortiClient VPN Credential Disclosure Vulnerability [ Highlight ]
Highlight - is paid service, that can help to get more visitors to your material.

Price:
Datum hinzufügen
Kategorie
Betriebssystem
Überprüft
Preis
Kostenlos
Risiko
[
Security Risk High
]
Rel. releases
Beschreibung
FortiClient stores the VPN authentication credentials in a configuration file (on Linux or Mac OSX) or in registry (on Windows). The credentials are encrypted but can still be recovered since the decryption key is hardcoded in the program and the same on all installations. Above all, the aforementioned storage is world readable, which actually lays the foundation for the credential recovery. Versions prior to 4.4.2335 on Linux, 5.6.1 on Windows, and 5.6.1 on Mac OSX are vulnerable.
CVE
CVE-2017-14184
Other Information
Abuses
0
Kommentare
0
Gelesen
4 312
We DO NOT use Telegram or any messengers / social networks! We DO NOT use Telegram or any messengers / social networks! Please, beware of scammers!
Kostenlos
Open Exploit
You can open this source code for free
Open Exploit
Open Exploit
You can open this source code for free
Verified by
Verified by
This material is checked by Administration and absolutely workable.
Autor
BL
29
Exploits
48
Leser
0
[ Kommentare: 0 ]
Terms of use of comments:
  • Users are forbidden to exchange personal contact details
  • Haggle on other sites\projects is forbidden
  • Reselling is forbidden
Punishment: permanent block of user account with all Gold.

Logge Dich ein, oder registriere Dich, um Kommentare zu schreiben