CVE-2024-46665

Fortinet / FortiOS PUBLISHED

Description (CNA)

An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may allow an attacker in a man-in-the-middle position to retrieve the RADIUS accounting server shared secret via intercepting accounting-requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiOS	affected 7.6.0; affected 7.4.0 through 7.4.4

CWE

CWE-201

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-326

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.