CVE-2017-7738

—

CVSS 3.0

7.2 high

EPSS

1%p72

Published

Dec 13, 2017 (Dec 13, 2017)

Modified

Jun 17, 2026

Description

An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, 5.2 and below versions allow an admin user with super_admin privileges to view the current SSL VPN web portal session info which may contains user credentials through the fnsysctl CLI command.

Vendors: fortinet
Products: fortios
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.