CVE-2021-36170
06.10.2021, 10:15
An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and below may allow an authenticated attacker to read the FortiCloud credentials which were used to activate the trial license in cleartext.Enginsight
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortianalyzer | 𝑥 < 6.4.7 |
| fortinet | fortianalyzer | 7.0.0 ≤ 𝑥 ≤ 7.0.1 |
| fortinet | fortimanager | 𝑥 < 6.4.7 |
| fortinet | fortimanager | 7.0.0 ≤ 𝑥 < 7.0.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration