Design/Logic Flaw

2021-11-0219:15:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

A unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows an authenticated user to disclosure agent password due to plaintext credential storage in log files

CPENameOperatorVersion
fortisiemge3.1.0
fortisiemle4.1.4

CPE	Name	Operator	Version
	fortisiem	ge	3.1.0
	fortisiem	le	4.1.4

References

fortiguard.com/advisory/FG-IR-21-175