An exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version 7.0.0 and before 6.7.5 may allow an attacker with access to windows agent logs to obtain the windows agent password via searching through the logs.
2023-11-14T18:15:52.590
2024-11-21T08:21:28.030
Modified
CVSSv3.1: 4.3 (MEDIUM)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | fortinet | fortisiem | ≤ 6.7.5 | Yes |
Application | fortinet | fortisiem | 7.0.0 | Yes |