CVE-2017-14189

CRÍTICO 9.8CVE-2017-14189 · Published 29/11/2017 · updated 17/06/2026

En resumen

CVE-2017-14189 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a fortiweb manager (fortinet).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.8%, mayor que el 86.4% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
fortiweb manager fortinet	`= 5.8.0`	No fix yet

Description

An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webUI to successfully log-in regardless the provided password.

References

securityfocus.com/bid/101953 · Third Party Advisory
securitytracker.com/id/1039892 · Third Party Advisory
fortiguard.com/advisory/FG-IR-17-248 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free