The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A cleartext transmission of sensitive information vulnerability [CWE-319] in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.8, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.8 allows an authenticated attacker with readonly superadmin privileges to intercept traffic in order to obtain other adminstrators cookies via diagnose CLI commands.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.0.8Upgrade to the latest version of FortiProxyUpgrade FortiProxy to 7.2.2 | Sep 30, 2026 | Jun 12, 2023 |
| Fortios | — | Upgrade FortiOS to 7.2.5Upgrade FortiOS to 7.0.9 | Jun 19, 2023 | Jun 12, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub