← CVE Intelligence

CVE-2024-23107

Fortinet / FortiWeb PUBLISHED

Description (CNA)

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiWeb version 7.4.0, version 7.2.4 and below, version 7.0.8 and below, 6.3 all versions may allow an authenticated attacker to read password hashes of other administrators via CLI commands.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiWebaffected 7.4.0; affected 7.2.0 through 7.2.4; affected 7.0.0 through 7.0.8; affected 6.3.0 through 6.3.23

CWE

CWE-200

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.