CVE-2015-1457

Fortinet FortiAuthenticator 3.0.0 allows local users to read arbitrary files via the -f flag to...

4.9 Medium

Fortinet FortiAuthenticator 3.0.0 allows local users to read arbitrary files via the -f flag to the dig command.

Exploit likelihood

0.49%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 4.9

Fortinet FortiAuthenticator 3.0.0 allows local users to read arbitrary files via the -f flag to the dig command.

Record: CVE-2015-1457
CVSS 2.0: 4.9 MediumAV:L/AC:L/Au:N/C:C/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

Fortinet FortiAuthenticator 3.0.0 allows local users to read arbitrary files via the -f flag to the dig command.

Record: CVE-2015-1457
Updated: 2026-11-02

EUVDEUVD-2015-1592 No score

Fortinet FortiAuthenticator 3.0.0 allows local users to read arbitrary files via the -f flag to the dig command.

Record: EUVD-2015-1592
Updated: 2026-11-03

GitHub AdvisoriesGHSA-j3ph-7jqj-268f No score

Fortinet FortiAuthenticator 3.0.0 allows local users to read arbitrary files via the -f flag to...

Fortinet FortiAuthenticator 3.0.0 allows local users to read arbitrary files via the -f flag to the dig command.

Record: GHSA-j3ph-7jqj-268f
Weakness: CWE-200
Updated: 2026-11-02

Affected products

fortinet fortiauthenticator

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-1457 is a medium vulnerability (CVSS 4.9) in Fortinet Fortiauthenticator, published February 3, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 42nd percentile. No source names a fixed version.

Exploit likelihood

What each source reports

Affected products

History

In short

References