CVE-2021-41023
First published: Tue Nov 02 2021(Updated: )
A unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows an authenticated user to disclosure agent password due to plaintext credential storage in log files
Credit: psirt@fortinet.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fortinet FortiSIEM | >=3.1.0<=4.1.4 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2021-41023.
What is the title of the vulnerability?
The title of the vulnerability is 'Unprotected Storage of Credentials in Fortinet FortiSIEM Windows Agent'.
What is the severity level of CVE-2021-41023?
The severity level of CVE-2021-41023 is medium with a score of 5.5.
Which software versions are affected by this vulnerability?
Fortinet FortiSIEM Windows Agent version 4.1.4 and below are affected.
How can an authenticated user exploit this vulnerability?
An authenticated user can exploit this vulnerability by reading the plaintext credential storage in log files, allowing them to disclose the agent password.
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/fortinet
- canonical/fortinet fortisiem
- version/fortinet fortisiem/3.1.0
- version/fortinet fortisiem/4.1.4
- vendor/microsoft
- canonical/microsoft windows