Sensitive Information Exposure in FortiOS by Fortinet
CVE-2024-46665

3.7LOW

Key Information:

Vendor

Fortinet
Status
FortiOS
Vendor
CVE Published:
14 January 2025

What is CVE-2024-46665?

A vulnerability exists in FortiOS versions 7.6.0 and 7.4.0 through 7.4.4, where an attacker positioned in a man-in-the-middle attack could potentially intercept accounting requests. This may lead to the unintended exposure of the RADIUS accounting server shared secret, compromising the security of sensitive data. Organizations using affected versions should take immediate action to secure their systems against possible exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-326

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.