CVE-2025-59669: Fortiweb: sabit kodlanmış kimlik bilgisi

Açıklama (NVD)

A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow an authenticated attacker with shell access to the device to connect to redis service and access its data

Özet bilgiler

Ürün

Fortinet Fortiweb

CVSS v3.1

5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

%0,13 (yüzdelik 2)

CWE

CWE-798

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• fortiguard.fortinet.com
• CWE-798