medium4.3
CVE-2020-15935
A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated attacker to retrieve…
Impact
A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated attacker to retrieve some sensitive information such as users LDAP passwords and RADIUS shared secret by deobfuscating the passwords entry fields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiadc | from 5.0.0 through 5.4.3 from 6.0.0 through 6.0.1 |