Description

An improper removal of sensitive information before storage or transfer vulnerability [CWE-212] in FortiSOAR version 7.3.0, version 7.2.2 and below, version 7.0.3 and below may allow an authenticated low privileged user to read Connector passwords in plain-text via HTTP responses.

Related CPE's

Could not find any relations

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-052

Weaknesses

[email protected]

Primary
CWE-212

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.5 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Awaiting analysis

Published

2024-06-03T08:15:09.097

1 month ago

Last modified

2024-06-03T14:46:24.250

1 month ago