Total vulnerabilities in the database
An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and below may allow an authenticated attacker to read the FortiCloud credentials which were used to activate the trial license in cleartext.
| Software | From | Fixed in |
|---|---|---|
| fortinet / fortimanager | 7.0.0 | 7.0.1 |
| fortinet / fortianalyzer | 7.0.0 | 7.0.1.x |
| fortinet / fortianalyzer | - | 6.4.7 |
| fortinet / fortimanager | - | 6.4.7 |