CVE-2021-36170: Credentials observed in cleartext in the logfile
An information disclosure vulnerability [CWE-200] in FortiAnalyzer and FortiManager VM may allow an authenticated attacker to read the FortiCloud credentials which were used to activate the trial license in cleartext.
Other sources
An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and below may allow an authenticated attacker to read the FortiCloud credentials which were used to activate the trial license in cleartext.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-36170?
CVE-2021-36170 is an information disclosure vulnerability in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and below that may allow an authenticated attacker to read the FortiCloud credentials used to activate the trial license.
What is the severity of CVE-2021-36170?
The severity of CVE-2021-36170 is low, with a severity value of 3.2.
Which software versions are affected by CVE-2021-36170?
FortiAnalyzerVM versions up to and including 6.4.6, FortiAnalyzerVM versions 7.0.0 and 7.0.1, FortiManagerVM versions up to and including 6.4.6, and FortiManagerVM versions 7.0.0 and 7.0.1.
How can an attacker exploit CVE-2021-36170?
An authenticated attacker can exploit CVE-2021-36170 by reading the FortiCloud credentials in cleartext, which were used to activate the trial license.
Is there a fix for CVE-2021-36170?
Yes, updating to FortiAnalyzerVM version 6.4.7 or higher, or FortiAnalyzerVM version 7.0.1 or higher, and FortiManagerVM version 6.4.7 or higher, or FortiManagerVM version 7.0.1 or higher will fix CVE-2021-36170.