<?xml version="1.0" encoding="UTF-8"?>
<cvrf:cvrfdoc xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
    <cvrf:DocumentTitle>FortiAuthenticator multiple vulnerabilities</cvrf:DocumentTitle>
    <cvrf:DocumentType>Fortinet PSIRT Advisories</cvrf:DocumentType>
    <cvrf:DocumentPublisher Type="Vendor">
        <cvrf:ContactDetails>
            Fortinet PSIRT Contact:
            Website: https://fortiguard.fortinet.com/faq/psirt-contact
        </cvrf:ContactDetails>
     </cvrf:DocumentPublisher>
    <cvrf:DocumentTracking>
        <cvrf:Identification>
            <cvrf:ID>FG-IR-15-003</cvrf:ID>
        </cvrf:Identification>
        <cvrf:Status>Final</cvrf:Status>
        <cvrf:Version>1</cvrf:Version>
        <cvrf:RevisionHistory>
            <cvrf:Revision>
                <cvrf:Number>1</cvrf:Number>
                <cvrf:Date>2015-02-05T00:00:00</cvrf:Date>
                <cvrf:Description>Current version</cvrf:Description>
        </cvrf:Revision>
       </cvrf:RevisionHistory>
        <cvrf:InitialReleaseDate>2015-02-05T00:00:00</cvrf:InitialReleaseDate>
        <cvrf:CurrentReleaseDate>2015-02-05T00:00:00</cvrf:CurrentReleaseDate>
    </cvrf:DocumentTracking>
    <cvrf:DocumentNotes>
        <cvrf:Note Title="Impact" Type="General" Ordinal="1">
            Local file disclosure, Local passwords disclosure, reflected XSS
        </cvrf:Note>
        <cvrf:Note Title="Affected Products" Type="General" Ordinal="2">
            Password disclosure and local file disclosure (CVE-2015-1456, CVE-2015-1455, CVE-2015-1457) affect FortiAuthenticator lower than 3.2.0Reflected XSS (CVE-2015-1459) affect FortiAuthenticator lower than 3.2.1
        </cvrf:Note>
        <cvrf:Note Title="Solutions" Type="General" Ordinal="3">
            Upgrade to FortiAuthenticator 3.2.1 or higher.
        </cvrf:Note>
    </cvrf:DocumentNotes>
    <Vulnerability Ordinal="1">
        <Title>FortiAuthenticator multiple vulnerabilities</Title>
        <cvrf:CVE>CVE-2015-1455</cvrf:CVE>
        <cvrf:CVE>CVE-2015-1456</cvrf:CVE>
        <cvrf:CVE>CVE-2015-1457</cvrf:CVE>
        <cvrf:CVE>CVE-2015-1459</cvrf:CVE>
        <References Type="Self">
            <Reference>
                <URL>https://fortiguard.fortinet.com/psirt/FG-IR-15-003</URL>
                <Description>FortiAuthenticator multiple vulnerabilities</Description>
            </Reference>Reference>
        </References>
    </Vulnerability>
</cvrf:cvrfdoc>