Beveiligingsadvies

CVE-2024-33504

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-02-11 16:09:03

Laatst bijgewerkt 2025-02-11 16:32:53

Toegewezen door fortinet

CVSS-score 3.9

Status PUBLISHED

Beschrijving

A use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in FortiManager 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.9, 7.0 all versions, 6.4 all versions may allow an attacker with JSON API access permissions to decrypt some secrets even if the 'private-data-encryption' setting is enabled.

← Alle CVE's bekijken Bekijk op cve.org ↗