The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiOS version 7.2.0 through 7.2.3 and 7.0.0 through 7.0.9 allows an unauthenticated attackers to obtain sensitive logging informations on the device via crafted HTTP GET requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade to the latest version of FortiProxyUpgrade FortiProxy to 7.0.9Upgrade FortiProxy to 7.2.3 | Sep 30, 2026 | Mar 7, 2023 |
| Fortios | — | Upgrade FortiOS to 7.0.10Upgrade to the latest version of FortiOSUpgrade FortiOS to 7.2.4Upgrade FortiOS to 6.4.12 | Mar 16, 2023 | Mar 7, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub