Skip to content
fr Sign in
5.9 Medium

CVE-2024-40593 A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through…

Description

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6.4 all versions, FortiOS 7.6.0, FortiOS 7.4.4, FortiOS 7.2.7, FortiOS 7.0.14, FortiPortal 6.0 all versions may allow an authenticated admin to retrieve a certificate's private key via the device's admin shell.

Affected products and versions

Product Affected versions Fixed in
FortiPortal 6.0 6.0.0 → 6.0.15 No fix stated
FortiAnalyzer 7.4 7.4.0 → 7.4.2 No fix stated
FortiAnalyzer 7.2 7.2.0 → 7.2.5 No fix stated
FortiAnalyzer 7.0 7.0.0 → 7.0.15 No fix stated
FortiAnalyzer 6.4 6.4.0 → 6.4.15 No fix stated
FortiOS 7.6.0 No fix stated
FortiOS 7.4.4 No fix stated
FortiOS 7.2.7 No fix stated
FortiOS 7.0.14 No fix stated
Show the 4 other branches
Product Affected versions Fixed in
FortiManager 7.4 7.4.0 → 7.4.2 No fix stated
FortiManager 7.2 7.2.0 → 7.2.5 No fix stated
FortiManager 7.0 7.0.0 → 7.0.15 No fix stated
FortiManager 6.4 6.4.0 → 6.4.15 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiPortal

The 25 CVEs of FortiPortal →
CVE-2026-49938 A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8,… 6.2 Medium CVE-2025-54838 An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated… 6.4 Medium CVE-2024-45329 A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5,… 3.9 Low CVE-2025-46777 A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5,… 2.2 Low
Track this CVE