An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets.
References
Link | Resource |
---|---|
https://fortiguard.com/advisory/FG-IR-17-073 | Vendor Advisory |
http://www.securityfocus.com/bid/100211 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
Information
Published : 2017-08-10 14:29
Updated : 2017-08-21 07:49
NVD link : CVE-2017-3130
Mitre link : CVE-2017-3130
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
fortinet
- fortios