CVE-2024-47569

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-47569
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiNDR 7.6.0 through 7.6.1, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiNDR 1.5 all versions, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.4, FortiProxy 7.2.0 through 7.2.10, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions, FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiTester 7.4.0 through 7.4.2, FortiTester 7.3 all versions, FortiTester 7.2 all versions, FortiTester 7.1 all versions, FortiTester 7.0 all versions, FortiTester 4.2 all versions, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0.7 through 6.0.12, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions allows attacker to disclose sensitive information via specially crafted packets.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://fortiguard.fortinet.com/psirt/FG-IR-24-228 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*

Configuration 6 (hide)

cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*

Configuration 7 (hide)

OR cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*

Configuration 8 (hide)

OR cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:*

Configuration 9 (hide)

cpe:2.3:a:fortinet:fortisase:24.3.20:*:*:*:-:*:*:*

Configuration 10 (hide)

cpe:2.3:a:fortinet:fortitester:*:*:*:*:*:*:*:*

Configuration 11 (hide)

OR cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:*

Configuration 12 (hide)

OR cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*
History

27 Oct 2026, 23:10

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad de inserción de información sensible en datos enviados en Fortinet FortiMail versiones 7.4.0 hasta la 7.4.2 incluida, FortiMail versiones 7.2.0 hasta la 7.2.6 incluida, FortiMail 7.0 y todas las versiones, FortiManager versiones 7.6.0 hasta la 7.6.1 incluida, FortiManager versiones 7.4.1 hasta la 7.4.3 incluida, FortiManager Cloud versiones 7.4.1 hasta la 7.4.3 incluida, FortiNDR versiones 7.6.0 hasta la 7.6.1 incluida, FortiNDR versiones 7.4.0 hasta la 7.4.8 incluida, FortiNDR 7.2 y todas las versiones, FortiNDR 7.1 y todas las versiones, FortiNDR 7.0 y todas las versiones, FortiNDR 1.5 y todas las versiones, FortiOS 7.6.0, FortiOS versiones 7.4.0 hasta la 7.4.4 incluida, FortiOS versiones 7.2.0 hasta la 7.2.8 incluida, FortiOS versiones 7.0.0 hasta la 7.0.15 incluida, FortiOS versiones 6.4.0 hasta la 6.4.15 incluida, FortiOS 6.2 y todas las versiones, FortiOS 6.0 y todas las versiones, FortiPAM 1.3 y todas las versiones, FortiPAM 1.2 y todas las versiones, FortiPAM 1.1 y todas las versiones, FortiPAM 1.0 y todas las versiones, FortiProxy versiones 7.4.0 hasta la 7.4.4 incluida, FortiProxy versiones 7.2.0 hasta la 7.2.10 incluida, FortiProxy 7.0 y todas las versiones, FortiProxy 2.0 y todas las versiones, FortiProxy 01.02 y todas las versiones, FortiProxy 1.2 y todas las versiones, FortiProxy 01.01 y todas las versiones, FortiProxy 1.1 y todas las versiones, FortiProxy 01.00 y todas las versiones, FortiRecorder versiones 7.2.0 hasta la 7.2.1 incluida, FortiRecorder versiones 7.0.0 hasta la 7.0.4 incluida, FortiTester versiones 7.4.0 hasta la 7.4.2 incluida, FortiTester 7.3 y todas las versiones, FortiTester 7.2 y todas las versiones, FortiTester 7.1 y todas las versiones, FortiTester 7.0 y todas las versiones, FortiTester 4.2 y todas las versiones, FortiVoice versiones 7.0.0 hasta la 7.0.4 incluida, FortiVoice versiones 6.4.0 hasta la 6.4.9 incluida, FortiVoice versiones 6.0.7 hasta la 6.0.12 incluida, FortiWeb 7.6.0, FortiWeb versiones 7.4.0 hasta la 7.4.4 incluida, FortiWeb 7.2 y todas las versiones, FortiWeb 7.0 y todas las versiones, FortiWeb 6.4 y todas las versiones permite al atacante divulgar información sensible a través de paquetes especialmente diseñados.

22 Oct 2026, 14:17

Type Values Removed Values Added
Summary (en) A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiNDR 7.6.0 through 7.6.1, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiNDR 1.5 all versions, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.4, FortiProxy 7.2.0 through 7.2.10, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions, FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiTester 7.4.0 through 7.4.2, FortiTester 7.3 all versions, FortiTester 7.2 all versions, FortiTester 7.1 all versions, FortiTester 7.0 all versions, FortiTester 4.2 all versions, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0.7 through 6.0.12, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions allows attacker to disclose sensitive information via specially crafted packets. (en) A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiNDR 7.6.0 through 7.6.1, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiNDR 1.5 all versions, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.4, FortiProxy 7.2.0 through 7.2.10, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions, FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiTester 7.4.0 through 7.4.2, FortiTester 7.3 all versions, FortiTester 7.2 all versions, FortiTester 7.1 all versions, FortiTester 7.0 all versions, FortiTester 4.2 all versions, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0.7 through 6.0.12, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions allows attacker to disclose sensitive information via specially crafted packets.
Information

Published : 2025-10-14 16:15

Updated : 2026-10-27 23:10

NVD link : CVE-2024-47569

Mitre link : CVE-2024-47569

CVE.ORG link : CVE-2024-47569

JSON object : View

Products Affected

fortinet

  • fortindr
  • fortiproxy
  • fortios
  • fortimail
  • fortimanager_cloud
  • fortiweb
  • fortirecorder
  • fortitester
  • fortivoice
  • fortisase
  • fortimanager
  • fortipam
CWE
CWE-201

Insertion of Sensitive Information Into Sent Data