FortiWLM CVE-2017-7336 Hardcoded Password Security Bypass Vulnerability

Bugtraq ID:	99351
Class:	Access Validation Error
CVE:	CVE-2017-7336
Remote:	Yes
Local:	No
Published:	Jun 30 2017 12:00AM
Updated:	Jun 30 2017 12:00AM
Credit:	Adam Piekarzewski
Vulnerable:	Fortinet FortiWLM 8.3 Fortinet FortiWLM 8.2.2 Fortinet FortiWLM 8.0
Not Vulnerable:	Fortinet FortiWLM 8.3.1

FortiWLM CVE-2017-7336 Hardcoded Password Security Bypass Vulnerability

FortiWLM is prone to a security-bypass vulnerability.

Attackers can exploit this issue to bypass the authentication mechanism and gain unauthorized access to the device.

FortiWLM versions 8.3.0 and prior are vulnerable.

FortiWLM CVE-2017-7336 Hardcoded Password Security Bypass Vulnerability

An attacker can exploit this issue using readily available tools.

FortiWLM CVE-2017-7336 Hardcoded Password Security Bypass Vulnerability

References:

• Fortinet Homepage (Fortinet)
  
• FortiWLM upgrade user account hard-coded credentials (Fortinet)