CVE-2017-7738: Fortinet FortiOS

High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days.

An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, 5.2 and below versions allow an admin user with super_admin privileges to view the current SSL VPN web portal session info which may contains user credentials through the fnsysctl CLI command.

Affected products

• Fortinet FortiOS: up to and including 5.2; from 5.4.0, up to and including 5.4.5; from 5.6.0, up to and including 5.6.2

Published 2017-12-13. Last modified 2026-06-17.