cveboard RSS feed

CVE-2024-47570

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2024
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0 all versions; FortiProxy 7.4.0 through 7.4.3, 7.2.0 through 7.2.11; FortiPAM 1.4 all versions, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions and FortiSRA 1.4 all versions may allow a read-only administrator to retrieve API tokens of other administrators via observing REST API logs, if REST API logging is enabled (non-default configuration).

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

FortiSASE

Vendor
Fortinet
Product
FortiSASE
Platforms
Unknown
Default status
unaffected
FortiSASE · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
24.1.10affectedUnavailableUnavailableUnavailableNone listed

FortiProxy

Vendor
Fortinet
Product
FortiProxy
Platforms
Unknown
Default status
unaffected
FortiProxy · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
7.4.0affectedsemverUnavailable7.4.3None listed
7.2.0affectedsemverUnavailable7.2.11None listed

FortiSRA

Vendor
Fortinet
Product
FortiSRA
Platforms
Unknown
Default status
unaffected
FortiSRA · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.4.0affectedsemverUnavailable1.4.3None listed

FortiPAM

Vendor
Fortinet
Product
FortiPAM
Platforms
Unknown
Default status
unaffected
FortiPAM · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.4.0affectedsemverUnavailable1.4.3None listed
1.3.0affectedsemverUnavailable1.3.1None listed
1.2.0affectedUnavailableUnavailableUnavailableNone listed
1.1.0affectedsemverUnavailable1.1.2None listed
1.0.0affectedsemverUnavailable1.0.3None listed

FortiOS

Vendor
Fortinet
Product
FortiOS
Platforms
Unknown
Default status
unaffected
FortiOS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
7.4.0affectedsemverUnavailable7.4.3None listed
7.2.0affectedsemverUnavailable7.2.7None listed
7.0.4affectedsemverUnavailable7.0.18None listed