CVE-2017-14185

Description

An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal users to access internal FortiOS configuration information (eg:addresses) via specifically crafted URLs inside the SSL-VPN web portal.

Risk Information

Base Score

5.3

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS Score

Exploitation Probability

0.327

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2017-14185 ,CVE-2017-14186 ,CVE-2017-14187 ,CVE-2017-14190 are affected in fortios 5.6.2	NCM
Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-14185)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234