FG-IR-21-112: Credentials observed in cleartext in the logfile
An information disclosure vulnerability [CWE-200] in FortiAnalyzer and FortiManager VM may allow an authenticated attacker to read the FortiCloud credentials which were used to activate the trial license in cleartext.
Affected Software
Event History
Frequently Asked Questions
What is the severity of FG-IR-21-112?
The severity of FG-IR-21-112 is classified as high due to the possibility of an authenticated attacker unauthorizedly accessing FortiCloud credentials in cleartext.
How do I fix FG-IR-21-112?
To fix FG-IR-21-112, ensure that you upgrade to the latest versions of FortiAnalyzer and FortiManager as recommended by Fortinet.
What kind of impact does FG-IR-21-112 have?
The impact of FG-IR-21-112 can lead to unauthorized access to sensitive FortiCloud credentials, compromising security.
Who is affected by FG-IR-21-112?
FG-IR-21-112 affects users of Fortinet FortiAnalyzer and FortiManager virtual machines that are vulnerable to information disclosure.
Is FG-IR-21-112 exploit public?
As of now, there is no public exploit for FG-IR-21-112, but the vulnerability is serious enough to warrant immediate action.