CVE Catalog
CVE-2016-8491
CriticalSummary
The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell.
Risk Assessment
The organization may be exposed to unauthorized access to the system, potentially leading to data leakage or modification of critical settings.
Recommendation
It is recommended to remove or disable the hardcoded 'core' account and implement strong authentication mechanisms.
Original NVD description (English source)
The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell.