Vulnerability Description
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiNDR 7.6.0 through 7.6.1, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiNDR 1.5 all versions, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.4, FortiProxy 7.2.0 through 7.2.10, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions, FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiTester 7.4.0 through 7.4.2, FortiTester 7.3 all versions, FortiTester 7.2 all versions, FortiTester 7.1 all versions, FortiTester 7.0 all versions, FortiTester 4.2 all versions, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0.7 through 6.0.12, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions allows attacker to disclose sensitive information via specially crafted packets.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | Fortimail | >= 7.0.0, < 7.2.7 |
| Fortinet | Fortimanager | >= 7.4.1, < 7.4.4 |
| Fortinet | Fortimanager Cloud | >= 7.4.1, < 7.4.4 |
| Fortinet | Fortindr | >= 1.5.0, < 7.4.9 |
| Fortinet | Fortios | >= 6.0.0, < 6.4.16 |
| Fortinet | Fortipam | >= 1.0.0, <= 1.3.1 |
| Fortinet | Fortiproxy | >= 1.0.0, < 7.2.11 |
| Fortinet | Fortirecorder | >= 7.0.0, < 7.0.5 |
| Fortinet | Fortisase | 24.3.20 |
| Fortinet | Fortitester | >= 4.2.0, < 7.4.3 |
| Fortinet | Fortivoice | >= 6.0.7, < 6.4.10 |
| Fortinet | Fortiweb | >= 6.4.0, < 7.4.5 |
Related Weaknesses (CWE)
References
- https://fortiguard.fortinet.com/psirt/FG-IR-24-228Vendor Advisory
FAQ
What is CVE-2024-47569?
CVE-2024-47569 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1...
How severe is CVE-2024-47569?
CVE-2024-47569 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-47569?
Check the references section above for vendor advisories and patch information. Affected products include: Fortinet Fortimail, Fortinet Fortimanager, Fortinet Fortimanager Cloud, Fortinet Fortindr, Fortinet Fortios.