Skip to content
CVE PROGRAM SOURCE RECORD4.2 Medium

CVE-2024-47569

A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiNDR 7.6.0 through 7.6.1, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiNDR 1.5 all versions, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.4, FortiProxy 7.2.0 through 7.2.10, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions, FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiTester 7.4.0 through 7.4.2, FortiTester 7.3 all versions, FortiTester 7.2 all versions, FortiTester 7.1 all versions, FortiTester 7.0 all versions, FortiTester 4.2 all versions, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0.7 through 6.0.12, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions allows attacker to disclose sensitive information via specially crafted packets.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiManager

Default version status: unaffected

  • 7.6.0 to ≤ 7.6.1affected
  • 7.4.1 to ≤ 7.4.3affected

Fortinet FortiOS

Default version status: unaffected

  • 7.6.0affected
  • 7.4.0 to ≤ 7.4.4affected
  • 7.2.0 to ≤ 7.2.8affected
  • 7.0.0 to ≤ 7.0.15affected
  • 6.4.0 to ≤ 6.4.15affected
  • 6.2.0 to ≤ 6.2.17affected
  • 6.0.0 to ≤ 6.0.18affected

Fortinet FortiProxy

Default version status: unaffected

  • 7.4.0 to ≤ 7.4.4affected
  • 7.2.0 to ≤ 7.2.10affected
  • 7.0.0 to ≤ 7.0.23affected
  • 2.0.0 to ≤ 2.0.14affected
  • 1.2.1 to ≤ 1.2.13affected
  • 01.02.00affected
  • 1.1.4 to ≤ 1.1.6affected
  • 01.01.00 to ≤ 01.01.03affected
  • 01.00.00 to ≤ 01.00.07affected

Fortinet FortiWeb

Default version status: unaffected

  • 7.6.0affected
  • 7.4.0 to ≤ 7.4.4affected
  • 7.2.0 to ≤ 7.2.13affected
  • 7.0.0 to ≤ 7.0.12affected
  • 6.4.0 to ≤ 6.4.3affected

Fortinet FortiVoice

Default version status: unaffected

  • 7.0.0 to ≤ 7.0.4affected
  • 6.4.0 to ≤ 6.4.9affected
  • 6.0.7 to ≤ 6.0.12affected

Fortinet FortiTester

Default version status: unaffected

  • 7.4.0 to ≤ 7.4.2affected
  • 7.3.0 to ≤ 7.3.2affected
  • 7.2.0 to ≤ 7.2.3affected
  • 7.1.0 to ≤ 7.1.1affected
  • 7.0.0affected
  • 4.2.0 to ≤ 4.2.1affected

Fortinet FortiPAM

Default version status: unaffected

  • 1.3.0 to ≤ 1.3.1affected
  • 1.2.0affected
  • 1.1.0 to ≤ 1.1.2affected
  • 1.0.0 to ≤ 1.0.3affected

Fortinet FortiNDR

Default version status: unaffected

  • 7.6.0 to ≤ 7.6.1affected
  • 7.4.0 to ≤ 7.4.8affected
  • 7.2.0 to ≤ 7.2.5affected
  • 7.1.0 to ≤ 7.1.1affected
  • 7.0.0 to ≤ 7.0.7affected
  • 1.5.0 to ≤ 1.5.3affected

Fortinet FortiMail

Default version status: unaffected

  • 7.4.0 to ≤ 7.4.2affected
  • 7.2.0 to ≤ 7.2.6affected
  • 7.0.0 to ≤ 7.0.9affected

Fortinet FortiRecorder

Default version status: unaffected

  • 7.2.0 to ≤ 7.2.1affected
  • 7.0.0 to ≤ 7.0.4affected

Fortinet FortiManager Cloud

Default version status: unaffected

  • 7.4.1 to ≤ 7.4.3affected

References