5.4
Moyenne
CVE-2024-23104 An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0…
Description
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiVoice 7.0.0 through 7.0.1 may allow a remote authenticated attacker with at least read-only permission on system maintenance to access backup information via crafted HTTP requests
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiVoice 7.0 | 7.0.0 → 7.0.1 | Pas de correctif indiqué |
| FortiNDR | 7.6.0 | Pas de correctif indiqué |
| FortiNDR 7.4 | 7.4.0 → 7.4.8 | Pas de correctif indiqué |
| FortiNDR 7.2 | 7.2.0 → 7.2.5 | Pas de correctif indiqué |
| FortiNDR 7.1 | 7.1.0 → 7.1.1 | Pas de correctif indiqué |
| FortiNDR 7.0 | 7.0.0 → 7.0.7 | Pas de correctif indiqué |
Références
- fortiguard.fortinet.com fortiguard.fortinet.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de FortiVoice
Les 20 CVE de FortiVoice →
CVE-2025-55717
A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through…
3.8
Faible
CVE-2025-58693
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiVoice…
5.7
Moyenne
CVE-2025-64156
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet…
6.8
Moyenne
CVE-2025-60024
Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilities [CWE-22]…
7.7
Élevée