CVE-2024-32122: LDAP Clear-text credentials retrievable with IP modification
A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.
Other sources
An insufficiently protected credentials [CWE-522] vulnerability in FortiOS may allow a privileged authenticated attacker to retrieve LDAP credentials via modifying the LDAP server IP address in the FortiOS configuration to point to a malicious attacker-controlled server.
— FortiGuard
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Fortinet FortiOSto a version that resolves this vulnerability.Fixed in 7.4.9 - Upgrade
Upgrade
Fortinet FortiOSto a version that resolves this vulnerability.Fixed in 7.6.0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-32122?
CVE-2024-32122 is classified as a significant risk due to the potential for information disclosure through improper credential storage in FortiOS.
How do I fix CVE-2024-32122?
To mitigate CVE-2024-32122, ensure that you upgrade FortiOS to the latest version that addresses this vulnerability.
What versions of FortiOS are affected by CVE-2024-32122?
CVE-2024-32122 impacts FortiOS versions 6.4, 7.0, 7.2.0, and 7.2.1.
Can CVE-2024-32122 lead to a data breach?
Yes, CVE-2024-32122 can potentially lead to a data breach if attackers exploit the vulnerability to access sensitive credentials.
What type of vulnerability is CVE-2024-32122 categorized as?
CVE-2024-32122 is categorized as an insufficiently protected credentials vulnerability, allowing attackers to point LDAP servers to malicious endpoints.