The qm class in Fortinet FortiClient 5.2.3.091 for Android uses a hardcoded encryption key of FoRtInEt!AnDrOiD, which makes it easier for attackers to obtain passwords and possibly other sensitive data by leveraging the key to decrypt data in the Shared Preferences.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1453
Reference (s):
- BID:72383
- URL: http://www.securityfocus.com/bid/72383
- FULLDISC:20150129 Fortinet FortiClient Multiple Vulnerabilities
- URL: http://seclists.org/fulldisclosure/2015/Jan/124
- http://www.security-assessment.com/files/documents/advisory/Fortinet_FortiClient_Multiple_Vulnerabilities.pdf