CVE-2015-1455

High

Published: 03/02/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Fortinet FortiAuthenticator 3.0.0 has default passwords for PostgreSQL users, making it easier for remote attackers to gain access to the system.

Risk Assessment

The use of default passwords increases the risk of unauthorized access to the database, potentially leading to serious security breaches.

Recommendation

It is recommended to immediately change the default passwords for PostgreSQL users to strong, unique passwords.

Other vulnerabilities in Fortinet FortiAuthenticator 3.0.0

CVE-2026-44277Critical
An improper access control vulnerability exists in Fortinet FortiAuthenticator versions 8.0.2, 8.0.0, 6.6.0 through 6.6.8, and 6.5.0 through 6.5.6. This may allow an attacker to execute unauthorized code or commands via crafted requests.

Original NVD description (English source)

Fortinet FortiAuthenticator 3.0.0 has a password of (1) slony for the slony PostgreSQL user and (2) www-data for the www-data PostgreSQL user, which makes it easier for remote attackers to obtain access via unspecified vectors.