Lucene search

K
fortinetFortiGuard LabsFG-IR-22-447
HistoryMar 07, 2023 - 12:00 a.m.

FortiAnalyzer -- the log-fetch client request password is shown in clear text in the heartbeat response

2023-03-0700:00:00
FortiGuard Labs
www.fortiguard.com
11
fortianalyzer
log-fetch
password
exposure
vulnerability

EPSS

0.001

Percentile

35.9%

An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiAnalyzer may allow a remote authenticated attacker to read the client machine password in plain text in a heartbeat response when a log-fetch request is made from the FortiAnalyzer

EPSS

0.001

Percentile

35.9%

Related for FG-IR-22-447