Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2024-40593

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versio

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6.4 all versions, FortiOS 7.6.0, FortiOS 7.4.4, FortiOS 7.2.7, FortiOS 7.0.14, FortiPortal 6.0 all versions may allow an authenticated admin to retrieve a certificate's private key via the device's admin shell.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiAnalyzer

Default version status: unaffected

  • 7.4.0 to ≤ 7.4.2affected
  • 7.2.0 to ≤ 7.2.5affected
  • 7.0.0 to ≤ 7.0.15affected
  • 6.4.0 to ≤ 6.4.15affected

Fortinet FortiPortal

Default version status: unaffected

  • 6.0.0 to ≤ 6.0.15affected

Fortinet FortiOS

Default version status: unaffected

  • 7.6.0affected
  • 7.4.4affected
  • 7.2.7affected
  • 7.0.14affected

Fortinet FortiManager

Default version status: unaffected

  • 7.4.0 to ≤ 7.4.2affected
  • 7.2.0 to ≤ 7.2.5affected
  • 7.0.0 to ≤ 7.0.15affected
  • 6.4.0 to ≤ 6.4.15affected

References