Skip to content
OpenAdvisories
Low · 2.1 CVE-2024-32122 EUVD-2024-29943GHSA-79gc-w327-w4f2

A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, Fo…

Published Apr 8, 2025 · Updated Oct 15, 2026 · Assigned by fortinet

Vendor: Fortinet Product: FortiOS Category: Network devices

Description

A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.

Affected products

VendorProductAffectedFixed
Fortinet FortiOS 7.4.0 – ≤ 7.4.8, 7.2.0 – ≤ 7.2.12, 7.0.0 – ≤ 7.0.18, 6.4.0 – ≤ 6.4.16 —

Advisories 4

References