| Package | Affected versions | Patched versions |
|---|---|---|
| fortios | ≥ 5.4.0, ≤ 5.4.5≥ 5.6.0, ≤ 5.6.2≤ 5.2 |
An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, 5.2 and below versions allow an admin user with super_admin privileges to view the current SSL VPN web portal session info which may contains user credentials through the fnsysctl CLI command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free