Skip to content
3.5 Low

CVE-2024-46665 An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may…

Description

An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may allow an attacker in a man-in-the-middle position to retrieve the RADIUS accounting server shared secret via intercepting accounting-requests.

Affected products and versions

Product Affected versions Fixed in
FortiOS 7.6.0 No fix stated
FortiOS 7.4 7.4.0 → 7.4.4 No fix stated

References

Timeline

  1. Published
  2. Last modified
The 180 CVEs of FortiOS →
Track this CVE