FortiManager, FortiAnalyzer, FortiPortal & FortiSwitch - Information disclosure through diagnose debug commands

2023-03-0700:00:00

FortiGuard Labs

www.fortiguard.com

fortimanager

fortianalyzer

fortiportal

fortiswitch

vulnerability

cwe-200

diagnose debug

sensitive information

unauthorized access

administrative account.

0.001 Low

EPSS

Percentile

27.7%

JSON

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiManager, FortiAnalyzer, FortiPortal & FortiSwitch may allow an attacker which has obtained access to a restricted administrative account to obtain sensitive information via diagnose debug commands.

CPENameOperatorVersion
fortimanagereq6.0.4
fortimanagereq6.0.3
fortimanagereq6.0.2
fortimanagereq6.0.1
fortimanagereq6.0.0
fortimanagereq5.6.9
fortimanagereq5.6.8
fortimanagereq5.6.7
fortimanagereq5.6.6
fortimanagereq5.6.5

Name	Operator	Version
fortimanager	eq	6.0.4
fortimanager	eq	6.0.3
fortimanager	eq	6.0.2
fortimanager	eq	6.0.1
fortimanager	eq	6.0.0
fortimanager	eq	5.6.9
fortimanager	eq	5.6.8
fortimanager	eq	5.6.7
fortimanager	eq	5.6.6
fortimanager	eq	5.6.5

Rows per page:

1-10 of 1051

0.001 Low

EPSS

Percentile

27.7%

JSON

Related for FG-IR-18-232