CVE-2017-7731

A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure…

fortinet·CWE-640·Published 2017-05-26

CVSS

—

EPSS

0.01

KEV

Exploits

cve.orgen

175 chars

A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature.

NVDen

175 chars

A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature.

NVDes

215 chars

Vulnerabilidad de recuperación de contraseña débil en Fortigate FortiPortal versiones 4.0.0 y siguientes permite al atacante llevar a cabo la divulgación de información a través de la función de contraseña olvidada.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.0	Primary	NVD	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N