⚠ VulnerabilityFortinet PSIRT·23d ago
OTP Disclosure via Exported TokenContentProvider
CVSSv3 Score: 5.0 An improper export of Android application components [CWE-926] in FortiTokenAndroid may allow other applications on the device to read the OTP code via an exported Content Provider URI. Revised on 2026-05-12 00:00:00
Sign in to read the full article
Create a free account to access all news, downloads, and community features
Originally published by Fortinet PSIRT
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-130
This article is shared for informational purposes. All rights belong to the original author and publisher. If you are the copyright holder and would like this content removed, please contact us.
Shared on IT-Hub by admin