CVE-2023-23776

An exposure of sensitive information to an unauthorized actor CWE-200 vulnerability in FortiAnalyzer versions 7.2.0 through 7.2.1, 7.0.0 through 7.0.4 and 6.4.0 through 6.4.10 may allow a remote authenticated attacker to read the client machine password in plain text in a heartbeat response when ...

PT-2023-1861

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 6.4.0 through 6.4.10 FortiAnalyzer versions 7.0.0 through 7.0.4 FortiAnalyzer versions 7.2.0 through 7.2.1 Description The issue is related to insufficient protection of passwords, allowing a remote authenticated attacke...

CVE-2023-23776: Exposure of Sensitive Information to an Unauthorized Actor

An exposure of sensitive information to an unauthorized actor CWE-200 vulnerability in FortiAnalyzer versions 7.2.0 through 7.2.1, 7.0.0 through 7.0.4 and 6.4.0 through 6.4.10 may allow a remote authenticated attacker to read the client machine password in plain text in a heartbeat response when ...