CVE-2024-47569

fortinet fortimail, fortinet fortimanager, fortinet fortimanager cloud +9 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-47569

Katalog CVE

CVSS 4.3 · Medium EPSS 0,47%

Kerentanan Insertion of Sensitive Information Into Sent Data pada fortinet fortimail, fortinet fortimanager +10 lainnya. Skor CVSS 3.1 4.3 (Medium) menurut fortinet.com.

Deskripsi (NVD)

A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiNDR 7.6.0 through 7.6.1, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiNDR 1.5 all versions, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.4, FortiProxy 7.2.0 through 7.2.10, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions, FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiTester 7.4.0 through 7.4.2, FortiTester 7.3 all versions, FortiTester 7.2 all versions, FortiTester 7.1 all versions, FortiTester 7.0 all versions, FortiTester 4.2 all versions, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0.7 through 6.0.12, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions allows attacker to disclose sensitive information via specially crafted packets.

Rincian

Terbit di NVD
14 Oktober 2025
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
4.3 (Medium), sumber fortinet.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-201: Insertion of Sensitive Information Into Sent Data
EPSS (30 hari)
0,47% peluang dieksploitasi; lebih tinggi dari 39,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
fortinet fortimail Versi 7.0.0 hingga sebelum 7.2.7
fortinet fortimail Versi 7.4.0 hingga sebelum 7.4.3
fortinet fortimanager Versi 7.4.1 hingga sebelum 7.4.4
fortinet fortimanager Versi 7.6.0 hingga sebelum 7.6.2
fortinet fortimanager cloud Versi 7.4.1 hingga sebelum 7.4.4
fortinet fortindr Versi 1.5.0 hingga sebelum 7.4.9
fortinet fortindr Versi 7.6.0 hingga 7.6.2
fortinet fortios Versi 6.0.0 hingga sebelum 6.4.16
fortinet fortios Versi 7.0.0 hingga sebelum 7.0.16
fortinet fortios Versi 7.2.0 hingga sebelum 7.2.9
fortinet fortios Versi 7.4.0 hingga sebelum 7.4.5
fortinet fortios Versi 7.6.0
fortinet fortipam Versi 1.0.0 hingga 1.3.1
fortinet fortiproxy Versi 1.0.0 hingga sebelum 7.2.11
fortinet fortiproxy Versi 7.4.0 hingga sebelum 7.4.5
fortinet fortirecorder Versi 7.0.0 hingga sebelum 7.0.5
fortinet fortirecorder Versi 7.2.0 hingga sebelum 7.2.2
fortinet fortisase Versi 24.3.20
fortinet fortitester Versi 4.2.0 hingga sebelum 7.4.3
fortinet fortivoice Versi 6.0.7 hingga sebelum 6.4.10
fortinet fortivoice Versi 7.0.0 hingga sebelum 7.0.5
fortinet fortiweb Versi 6.4.0 hingga sebelum 7.4.5
fortinet fortiweb Versi 7.6.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.