CVE-2021-36170

Publication date

2021-10-06 09:22:29

Family

fortinet

State

PUBLISHED

Description

An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and below may allow an authenticated attacker to read the FortiCloud credentials which were used to activate the trial license in cleartext.