CVE-2024-47569
Description
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiNDR 7.6.0 through 7.6.1, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiNDR 1.5 all versions, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.4, FortiProxy 7.2.0 through 7.2.10, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions, FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiTester 7.4.0 through 7.4.2, FortiTester 7.3 all versions, FortiTester 7.2 all versions, FortiTester 7.1 all versions, FortiTester 7.0 all versions, FortiTester 4.2 all versions, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0.7 through 6.0.12, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions allows attacker to disclose sensitive information via specially crafted packets.
How to fix
- fortinet fortimail7.2.7, 7.4.3 or later
- fortinet fortimanager7.4.4, 7.6.2 or later
- fortinet fortimanager_cloud7.4.4 or later
- fortinet fortindr7.4.9 or later
- fortinet fortios6.4.16, 7.0.16, 7.2.9, 7.4.5 or later
- fortinet fortiproxy7.2.11, 7.4.5 or later
- fortinet fortirecorder7.0.5, 7.2.2 or later
- fortinet fortitester7.4.3 or later
- fortinet fortivoice6.4.10, 7.0.5 or later
- fortinet fortiweb7.4.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fortinet fortimail | 7.0.0 ≤ v < 7.2.7, 7.4.0 ≤ v < 7.4.3 | 7.2.7, 7.4.3 |
| fortinet fortimanager | 7.4.1 ≤ v < 7.4.4, 7.6.0 ≤ v < 7.6.2 | 7.4.4, 7.6.2 |
| fortinet fortimanager_cloud | 7.4.1 ≤ v < 7.4.4 | 7.4.4 |
| fortinet fortindr | 1.5.0 ≤ v < 7.4.9, 7.6.0 ≤ v ≤ 7.6.2 | 7.4.9 |
| fortinet fortios | 6.0.0 ≤ v < 6.4.16, 7.0.0 ≤ v < 7.0.16, 7.2.0 ≤ v < 7.2.9, 7.4.0 ≤ v < 7.4.5, 7.6.0 | 6.4.16, 7.0.16, 7.2.9, 7.4.5 |
| fortinet fortipam | 1.0.0 ≤ v ≤ 1.3.1 | — |
| fortinet fortiproxy | 1.0.0 ≤ v < 7.2.11, 7.4.0 ≤ v < 7.4.5 | 7.2.11, 7.4.5 |
| fortinet fortirecorder | 7.0.0 ≤ v < 7.0.5, 7.2.0 ≤ v < 7.2.2 | 7.0.5, 7.2.2 |
| fortinet fortisase | 24.3.20 | — |
| fortinet fortitester | 4.2.0 ≤ v < 7.4.3 | 7.4.3 |
| fortinet fortivoice | 6.0.7 ≤ v < 6.4.10, 7.0.0 ≤ v < 7.0.5 | 6.4.10, 7.0.5 |
| fortinet fortiweb | 6.4.0 ≤ v < 7.4.5, 7.6.0 | 7.4.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.