medium4.3
CVE-2021-36178
A insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below allows attacker to disclose third-party devices credential informa…
Impact
A insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below allows attacker to disclose third-party devices credential information via configuration page lookup.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortisdnconnector | before 1.1.8 |