CVE-2016-7561 Information disclosure in n/a

What is CVE-2016-7561?

CVE-2016-7561 is a high-severity vulnerability in n/a, published on 5 Oct 2016. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user credentials by reading the pam.log file.

Weakness: CWE-200

Which versions are affected by CVE-2016-7561?

It affects 1 product.

Products include Fortinet Fortiwlc.

How do I fix CVE-2016-7561?

No fix has been published for CVE-2016-7561 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-7561 being exploited?

There is no known exploitation of CVE-2016-7561 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2017-17539 Hardcoded credentials in FortiWLC Critical 9.8
• CVE-2017-17540 Hardcoded credentials in FortiWLC Critical 9.8
• CVE-2016-7560 Hardcoded credentials in n/a Critical 9.8
• CVE-2016-8491 Hardcoded credentials in Fortinet FortiWLC Critical 9.1
• CVE-2021-42758 Privilege escalation in Fortinet FortiWLC High 8.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-874w-4q4h-wg36.