CVE-2015-1456: Fortinet Fortiauthenticator

Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Fortinet FortiAuthenticator 3.0.0 logs the PostgreSQL usernames and passwords in cleartext, which allows remote administrators to obtain sensitive information by reading the log at debug/startup/.

Affected products

• Fortinet Fortiauthenticator: version 3.0.0 only

Published 2015-02-03. Last modified 2026-06-17.