CVE-2017-14189

Critical

Published: 29/11/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webUI to successfully log-in regardless of the provided password.

Risk Assessment

This vulnerability poses a serious security risk by allowing unauthorized users to gain access to the administrative system.

Recommendation

It is recommended to update to the latest version of FortiWebManager to mitigate this vulnerability and implement additional security measures for accessing the admin interface.

Original NVD description (English source)

An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webUI to successfully log-in regardless the provided password.