CVE-2023-26207

An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy 7.0.0 through 7.0.10. 7.2.0 through 7.2.1 allows an attacker to read certain passwords in plain text.

Score

CVSS 3.1 6.5 Medium

Status

Modified - psirt@fortinet.com

Published

2023-06-13

Last modified

2024-10-22

Weaknesses

CWE-532

Affected products

• Fortios (Fortinet)
• Fortiproxy (Fortinet)

References

• https://fortiguard.com/psirt/FG-IR-22-455