CVEvulnerability
CVE-2015-1453
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-02-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
The qm class in Fortinet FortiClient 5.2.3.091 for Android uses a hardcoded encryption key of FoRtInEt!AnDrOiD, which makes it easier for attackers to obtain passwords and possibly other sensitive data by leveraging the key to decrypt data in the Shared Preferences.
Affected configurations
• fortinet forticlient (<= 5.2.3.091)
Related
Weakness · not in database (1)
References
- http://seclists.org/fulldisclosure/2015/Jan/124 Exploit
- http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiClient_Multiple_Vulnerabilities.pdf Exploit
- http://www.securityfocus.com/bid/72383 www.securityfocus.com
- http://seclists.org/fulldisclosure/2015/Jan/124 Exploit
- http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiClient_Multiple_Vulnerabilities.pdf Exploit
- http://www.securityfocus.com/bid/72383 www.securityfocus.com