Unprotected Credential Storage Vulnerability in Fortinet FortiSIEM
CVE-2021-41023
5.5MEDIUM
Key Information:
- Vendor
Fortinet
- Vendor
- CVE Published:
- 2 November 2021
What is CVE-2021-41023?
The Fortinet FortiSIEM Windows Agent prior to version 4.1.4 has a serious security flaw that exposes sensitive credentials. This vulnerability arises from the storage of agent passwords in log files in plaintext, enabling any authenticated user to view these credentials. Organizations using affected versions should take immediate action to secure their systems and mitigate potential unauthorized access.
Affected Version(s)
Fortinet FortiSIEMWindowsAgent FortiSIEMWindowsAgent 4.1.4, 4.1.3, 4.1.2, 4.1.1, 4.1.0, 4.0.0, 3.3.0, 3.2.2, 3.2.1, 3.2.0, 3.1.2, 3.1.0