An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy 7.0.0 through 7.0.10. 7.2.0 through 7.2.1 allows an attacker to read certain passwords in plain text.
Weakness
The product writes sensitive information to a log file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fortiproxy | Fortinet | 7.0.0 (including) | 7.0.10 (including) |
| Fortiproxy | Fortinet | 7.2.0 (including) | 7.2.0 (including) |
| Fortiproxy | Fortinet | 7.2.1 (including) | 7.2.1 (including) |
| Fortios | Fortinet | 7.2.0 (including) | 7.2.4 (including) |