CVE-2024-47570

CVE-2024-47570 describes a log-file information disclosure flaw in Fortinet products where a read-only administrator could retrieve API tokens of other admins by observing REST API logs when logging is enabled. Affected: FortiOS (versions 7.4.0–7.4.3, 7.2.0–7.2.7, 7.0.x), FortiProxy (7.4.0–7.4.3,...