critical9.8
CVE-2019-13400
Dynacolor FCM-MB40 v1.2.0.0 use /etc/appWeb/appweb.pass to store administrative web-interface credentials in cleartext.
Impact
Dynacolor FCM-MB40 v1.2.0.0 use /etc/appWeb/appweb.pass to store administrative web-interface credentials in cleartext. These credentials can be retrieved via cgi-bin/getuserinfo.cgi?mode=info.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fcm-Mb40 Firmware | Version 1.2.0.0 |