Lucene search

K
fortinetFortiGuard LabsFG-IR-20-014
HistoryFeb 16, 2023 - 12:00 a.m.

Protect

2023-02-1600:00:00
FortiGuard Labs
www.fortiguard.com
27
fortigate
fortiauthenticator
vulnerability
private keys
secure communication
apple
google
filesystem access

EPSS

0

Percentile

9.0%

A clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate and FortiAuthenticator may allow a local unauthorized party to retrieve the Fortinet private keys used to establish secure communication with both Apple Push Notification and Google Cloud Messaging services, via accessing the files on the filesystem.

EPSS

0

Percentile

9.0%

Related for FG-IR-20-014