EUVD-2021-28175

Malicious code in bioql PyPI...

CVE-2021-41022: Improper Privilege Management

A improper privilege management in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows attacker to execute privileged code or commands via powershell scripts...

CVE-2021-41023: Insufficiently Protected Credentials

A unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows an authenticated user to disclosure agent password due to plaintext credential storage in log files...