CVE-2023-23776

An exposure of sensitive information to an unauthorized actor CWE-200 vulnerability in FortiAnalyzer versions 7.2.0 through 7.2.1, 7.0.0 through 7.0.4 and 6.4.0 through 6.4.10 may allow a remote authenticated attacker to read the client machine password in plain text in a heartbeat response when ...

CVE-2023-23776

An exposure of sensitive information to an unauthorized actor CWE-200 vulnerability in FortiAnalyzer versions 7.2.0 through 7.2.1, 7.0.0 through 7.0.4 and 6.4.0 through 6.4.10 may allow a remote authenticated attacker to read the client machine password in plain text in a heartbeat response when ...

Log-fetch client request password is shown in clear text in the heartbeat response

...

CVE-2023-23776: Exposure of Sensitive Information to an Unauthorized Actor

An exposure of sensitive information to an unauthorized actor CWE-200 vulnerability in FortiAnalyzer versions 7.2.0 through 7.2.1, 7.0.0 through 7.0.4 and 6.4.0 through 6.4.10 may allow a remote authenticated attacker to read the client machine password in plain text in a heartbeat response when ...

PT-2023-1861

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 6.4.0 through 6.4.10 FortiAnalyzer versions 7.0.0 through 7.0.4 FortiAnalyzer versions 7.2.0 through 7.2.1 Description The issue is related to insufficient protection of passwords, allowing a remote authenticated attacke...

SSSD 操作系统命令注入漏洞

SSSD is a daemon that provides access to local or remote identity and authentication resources. SSSD suffers from an operating system command injection vulnerability that stems from a flaw found in SSSD where the ssssctl command can easily inject shell commands via the log -fetch and cache-expire...