← CVE Intelligence

CVE-2023-26204

Fortinet / FortiSIEM PUBLISHED

Description (CNA)

A plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions may allow an attacker able to access user DB content to impersonate any admin user on the device GUI.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiSIEMaffected 6.7.0 through 6.7.5; affected 6.6.0 through 6.6.3; affected 6.5.0 through 6.5.1; affected 6.4.0 through 6.4.2; affected 6.3.0 through 6.3.3; affected 6.2.0 through 6.2.1; affected 6.1.0 through 6.1.2; affected 5.4.0; affected 5.3.0 through 5.3.3

CWE

CWE-256

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.