Skip to content
OpenAdvisories
Low · 3.2 CVE-2021-36170 EUVD-2021-22791GHSA-pc9w-m2r6-3243

An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and below may allow an aut…

Published Oct 6, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiManager, FortiAnalyzer Category: Network devices

Description

An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and below may allow an authenticated attacker to read the FortiCloud credentials which were used to activate the trial license in cleartext.

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiManager, FortiAnalyzer FortiManager 7.0.0, 6.4.6; FortiAnalyzer 7.0.0, 6.4.6 —

References