{"id":"CVE-2024-23662","state":"PUBLISHED","title":"An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7.4.0 through 7.4.1 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.15 and","description":"An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7.4.0 through 7.4.1 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.15 and 6.4.0 through 6.4.15 allows attacker to information disclosure via HTTP requests.","publishedAt":"2024-04-09T14:24:18.538Z","updatedAt":"2024-08-22T19:58:33.041Z","severity":{"score":5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:X","source":"fortinet"},"assigner":"fortinet","products":["Fortinet FortiOS"],"affected":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.1","versionType":"semver"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.5","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.15","versionType":"semver"},{"version":"6.4.0","status":"affected","lessThanOrEqual":"6.4.15","versionType":"semver"}]}],"references":["https://fortiguard.com/psirt/FG-IR-23-224"],"weaknesses":["CWE-200"],"ingestedAt":"2026-10-29T20:06:59.846Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/23xxx/CVE-2024-23662.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-23662","state":"PUBLISHED","datePublished":"2024-04-09T14:24:18.538Z","dateUpdated":"2024-08-22T19:58:33.041Z","assignerShortName":"fortinet","assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateReserved":"2024-01-19T08:23:28.612Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7.4.0 through 7.4.1 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.15 and 6.4.0 through 6.4.15 allows attacker to information disclosure via HTTP requests."}],"affected":[{"vendor":"Fortinet","product":"FortiOS","defaultStatus":"unaffected","versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.1","versionType":"semver"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.5","versionType":"semver"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.15","versionType":"semver"},{"version":"6.4.0","status":"affected","lessThanOrEqual":"6.4.15","versionType":"semver"}]}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-224","name":"https://fortiguard.com/psirt/FG-IR-23-224"}],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:X"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","lang":"en","description":"Information disclosure","type":"CWE"}]}],"providerMetadata":{"shortName":"fortinet","orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateUpdated":"2024-04-09T14:24:18.538Z"},"solutions":[{"lang":"en","value":"Please upgrade to FortiOS version 7.4.2 or above \nPlease upgrade to FortiOS version 7.2.6 or above \n"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://fortiguard.com/psirt/FG-IR-23-224","name":"https://fortiguard.com/psirt/FG-IR-23-224","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T23:06:25.270Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"fortinet","product":"fortios","defaultStatus":"unknown","versions":[{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.1","versionType":"custom"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.5","versionType":"custom"},{"version":"7.0.0","status":"affected","lessThanOrEqual":"7.0.15","versionType":"custom"},{"version":"6.4.0","status":"affected","lessThanOrEqual":"6.4.15","versionType":"custom"}],"cpes":["cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-04-09T19:58:39.327704Z","id":"CVE-2024-23662","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-22T19:58:33.041Z"}}]}}}