CVE-2024-47569

A insertion of sensitive information into sent data in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiVoice 7.0.0 through 7.0.4, 6.4.0 through 6.4.9, 6.0.7 through 6.0.12, FortiMail 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.9, FortiOS 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, 6.2.0 through 6.2.17, 6.0.0 through 6.0.18, FortiWeb 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.11, 7.0.0 through 7.0.11, 6.4.0 through 6.4.3, FortiRecorder 7.2.0 through 7.2.1, 7.0.0 through 7.0.4, FortiNDR 7.6.0 through 7.6.1, 7.4.0 through 7.4.8, 7.2.0 through 7.2.5, 7.1.0 through 7.1.1, 7.0.0 through 7.0.7, 1.5.0 through 1.5.3, FortiPAM 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiTester 7.4.0 through 7.4.2, 7.3.0 through 7.3.2, 7.2.0 through 7.2.3, 7.1.0 through 7.1.1, 7.0.0, 4.2.0 through 4.2.1, FortiProxy 7.4.0 through 7.4.4, 7.2.0 through 7.2.10, 7.0.0 through 7.0.21, 2.0.0 through 2.0.14, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiManager 7.6.0 through 7.6.1, 7.4.1 through 7.4.3 allows attacker to disclose sensitive information via specially crafted packets.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
fortinetCNA
4.2 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:F/RL:U/RC:C
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 4%
VendorProductVersion
fortinetfortimail
7.0.0 ≤
𝑥
< 7.2.7
fortinetfortimail
7.4.0 ≤
𝑥
< 7.4.3
fortinetfortimanager
7.4.1 ≤
𝑥
< 7.4.4
fortinetfortimanager
7.6.0 ≤
𝑥
< 7.6.2
fortinetfortimanager_cloud
7.4.1 ≤
𝑥
< 7.4.4
fortinetfortindr
1.5.0 ≤
𝑥
< 7.4.9
fortinetfortindr
7.6.0 ≤
𝑥
≤ 7.6.2
fortinetfortios
6.0.0 ≤
𝑥
< 6.4.16
fortinetfortios
7.0.0 ≤
𝑥
< 7.0.16
fortinetfortios
7.2.0 ≤
𝑥
< 7.2.9
fortinetfortios
7.4.0 ≤
𝑥
< 7.4.5
fortinetfortios
7.6.0
fortinetfortipam
1.0.0 ≤
𝑥
≤ 1.3.1
fortinetfortiproxy
1.0.0 ≤
𝑥
< 7.2.11
fortinetfortiproxy
7.4.0 ≤
𝑥
< 7.4.5
fortinetfortirecorder
7.0.0 ≤
𝑥
< 7.0.5
fortinetfortirecorder
7.2.0 ≤
𝑥
< 7.2.2
fortinetfortisase
24.3.20
fortinetfortitester
4.2.0 ≤
𝑥
< 7.4.3
fortinetfortivoice
6.0.7 ≤
𝑥
< 6.4.10
fortinetfortivoice
7.0.0 ≤
𝑥
< 7.0.5
fortinetfortiweb
6.4.0 ≤
𝑥
< 7.4.5
fortinetfortiweb
7.6.0
𝑥
= Vulnerable software versions