Nixpkgs Security Tracker

Login with GitHub

Suggestion detail

Dismissed
Permalink CVE-2024-47569
4.2 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): LOW
  • Privileges required (PR): LOW
  • User interaction (UI): NONE
  • Scope (S): UNCHANGED
  • Confidentiality impact (C): LOW
  • Integrity impact (I): NONE
  • Availability impact (A): NONE
updated 1 month, 1 week ago by @LeSuisse Activity log
  • Created automatic suggestion
  • @LeSuisse removed
    4 packages
    • terraform-providers.fortios
    • python312Packages.fortiosapi
    • python313Packages.fortiosapi
    • python314Packages.fortiosapi
  • @LeSuisse dismissed
A insertion of sensitive information into sent data in Fortinet …

A insertion of sensitive information into sent data in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiVoice 7.0.0 through 7.0.4, 6.4.0 through 6.4.9, 6.0.7 through 6.0.12, FortiMail 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.9, FortiOS 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, 6.2.0 through 6.2.17, 6.0.0 through 6.0.18, FortiWeb 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.11, 7.0.0 through 7.0.11, 6.4.0 through 6.4.3, FortiRecorder 7.2.0 through 7.2.1, 7.0.0 through 7.0.4, FortiNDR 7.6.0 through 7.6.1, 7.4.0 through 7.4.8, 7.2.0 through 7.2.5, 7.1.0 through 7.1.1, 7.0.0 through 7.0.7, 1.5.0 through 1.5.3, FortiPAM 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiTester 7.4.0 through 7.4.2, 7.3.0 through 7.3.2, 7.2.0 through 7.2.3, 7.1.0 through 7.1.1, 7.0.0, 4.2.0 through 4.2.1, FortiProxy 7.4.0 through 7.4.4, 7.2.0 through 7.2.10, 7.0.0 through 7.0.21, 2.0.0 through 2.0.14, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiManager 7.6.0 through 7.6.1, 7.4.1 through 7.4.3 allows attacker to disclose sensitive information via specially crafted packets.

Affected products

FortiOS
  • =<7.0.15
  • =<7.4.4
  • =<7.2.8
  • ==7.6.0
  • =<6.4.15
FortiNDR
  • =<7.0.7
  • =<7.1.1
  • =<7.4.8
  • =<7.6.1
  • =<1.5.3
  • =<7.2.5
FortiPAM
  • =<1.1.2
  • ==1.2.0
  • =<1.0.3
  • =<1.3.1
FortiWeb
  • =<7.2.11
  • =<7.0.11
  • =<6.4.3
  • =<7.4.4
  • =<7.0.12
  • ==7.6.0
  • =<7.2.12
FortiMail
  • =<7.0.9
  • =<7.2.6
  • =<7.4.2
FortiProxy
  • =<7.0.23
  • =<7.4.4
  • =<7.2.10
  • =<7.0.22
  • =<7.0.21
FortiVoice
  • =<6.4.9
  • =<6.0.12
  • =<7.0.4
FortiTester
  • =<7.3.2
  • =<7.1.1
  • =<7.2.3
  • =<4.2.1
  • ==7.0.0
  • =<7.4.2
FortiManager
  • =<7.4.3
FortiRecorder
  • =<7.0.4
  • =<7.2.1
FortiManager Cloud
  • =<7.4.3
Not present in nixpkgs.