Test ID:	1.3.6.1.4.1.25623.1.0.140156
Category:	FortiOS Local Security Checks
Title:	Fortinet FortiOS Local Admin Password Hash Leak Vulnerability (FG-IR-16-050)
Summary:	Fortinet FortiOS is prone to a local admin password hash leak; vulnerability.
Description:	Summary: Fortinet FortiOS is prone to a local admin password hash leak vulnerability. Vulnerability Impact: A read-only administrator may have access to read-write administrators password hashes (not including super-admins) stored on the appliance via the webui REST API, and may therefore be able to crack them. Affected Software/OS: Fortinet FortiOS prior to version 5.2.10 and 5.4.0 prior to 5.4.2. Solution: Update to version 5.2.10 GA, 5.4.2 GA or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7542 BugTraq ID: 94690 http://www.securityfocus.com/bid/94690 http://www.securitytracker.com/id/1037394
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.