Skip to content
OpenAdvisories
Medium · 5.5 CVE-2021-41023 EUVD-2021-28176GHSA-5vqp-64mp-pg5r

A unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows an authenticated user to disclosure…

Published Nov 2, 2021 · Updated Oct 25, 2024 · Assigned by fortinet

Vendor: Fortinet Product: Fortinet FortiSIEMWindowsAgent Category: Network devices

Description

A unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows an authenticated user to disclosure agent password due to plaintext credential storage in log files

Affected products

VendorProductAffectedFixed
Fortinet Fortinet FortiSIEMWindowsAgent FortiSIEMWindowsAgent 4.1.4, 4.1.3, 4.1.2, 4.1.1, 4.1.0, 4.0.0, 3.3.0, 3.2.2, 3.2.1, 3.2.0, 3.1.2, 3.1.0 —

References