CVE-2024-27784
Multiple Exposure of sensitive information to an unauthorized actor weaknesses [CWE-200] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an authenticated, remote attacker to retrieve sensitive in
Severity
High 8.3
CVSS 3.1
Exploited
Not listed
EPSS
0.008
53.8th percentile
Discovered by
Vendor
Vendor advisory field
Published
Jul 9, 2024
Assigned by fortinet
Description
Multiple Exposure of sensitive information to an unauthorized actor weaknesses [CWE-200] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an authenticated, remote attacker to retrieve sensitive information from the API endpoint or log files.
Weakness: CWE-532
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Fortinet | FortiAIOps | Network & Security Management | cna-assigner |
Vendor-reported products (2)
- Fortinet · FortiAIOps
- fortinet · fortiaiops
Credit
Internally discovered and reported by Shripal Rawal and Jenny Ning of Fortinet PSIRT team.
Vendor remediation
Upgrade to FortiAIOps version 2.0.1 or above