- Added submission from Fortinet for FG-IR-17-214 from 2018-04-26.

This commit is contained in:
CVE Team 2018-04-26 15:06:22 -04:00
parent 8cd654cef8
commit 5b3691a5af
No known key found for this signature in database
GPG Key ID: 0DA1F9F56BC892E8

View File

@ -1,8 +1,52 @@
{
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org",
"ASSIGNER" : "psirt@fortinet.com",
"DATE_PUBLIC" : "2017-12-07T00:00:00",
"ID" : "CVE-2017-17543",
"STATE" : "RESERVED"
"STATE" : "PUBLIC"
},
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "FortiClient for Windows",
"version" : {
"version_data" : [
{
"version_value" : "5.6.0 and below versions"
}
]
}
},
{
"product_name" : "FortiClient for Mac OSX",
"version" : {
"version_data" : [
{
"version_value" : "5.6.0 and below versions"
}
]
}
},
{
"product_name" : "FortiClient SSLVPN Client for Linux",
"version" : {
"version_data" : [
{
"version_value" : "4.4.2335 and below versions"
}
]
}
}
]
},
"vendor_name" : "Fortinet, Inc."
}
]
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
@ -11,7 +55,26 @@
"description_data" : [
{
"lang" : "eng",
"value" : "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
"value" : "Users' VPN authentication credentials are unsafely encrypted in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Mac OSX 5.6.0 and below versions and FortiClient SSLVPN Client for Linux 4.4.2335 and below versions, due to the use of a static encryption key and weak encryption algorithms."
}
]
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "Information Disclosure"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"url" : "https://fortiguard.com/advisory/FG-IR-17-313"
}
]
}