VULNERABILITY INTELLIGENCE

CVE-2017-14185

CVSS score5.3 MEDIUM

EPSS probability1.29%

CISA KEVNot currently listed

Published2018-05-25

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal users to access internal FortiOS configuration information (eg:addresses) via specifically crafted URLs inside the SSL-VPN web portal.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

psirt@fortinet.com — Third Party Advisory, VDB Entry
psirt@fortinet.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory