An insertion of sensitive information into log file vulnerabilities [CWE-532] in FortiManager version 7.4.0, version 7.2.3 and below, version 7.0.8 and below, version 6.4.12 and below, version 6.2.11 and below and FortiAnalyzer version 7.4.0, version 7.2.3 and below, version 7.0.8 and below, version 6.4.12 and below, version 6.2.11 and below eventlog may allow any low privileged user with access to event log section to retrieve certificate private key and encrypted password logged as system log.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortianalyzer | — | Upgrade FortiAnalyzer to 7.0.9Upgrade FortiAnalyzer to 7.4.1Upgrade FortiAnalyzer to 7.2.4Upgrade to the latest version of FortiAnalyzer | Jul 25, 2025 | Feb 11, 2025 |
| Fortinet Fortimanager | — | Upgrade FortiManager to 7.2.4Upgrade FortiManager to 7.4.1Upgrade FortiManager to 7.0.9Upgrade to the latest version of FortiManager | May 25, 2026 | Feb 11, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub