CVE-2024-47569

Published: Oct 14, 2025Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: psirt@fortinet.com (Secondary)

Description

A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiNDR 7.6.0 through 7.6.1, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiNDR 1.5 all versions, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.4, FortiProxy 7.2.0 through 7.2.10, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1 all versions, FortiProxy 1.0 all versions, FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiTester 7.4.0 through 7.4.2, FortiTester 7.3 all versions, FortiTester 7.2 all versions, FortiTester 7.1 all versions, FortiTester 7.0 all versions, FortiTester 4.2 all versions, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0.7 through 6.0.12, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions allows attacker to disclose sensitive information via specially crafted packets.

Affected (23)

Products: Fortinet: Fortimail, Fortimanager, Fortimanager Cloud, Fortindr, Fortios, Fortipam, Fortiproxy, Fortirecorder, Fortisase, Fortitester, Fortivoice, Fortiweb

12 products

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortimail	From 7.0.0 to 7.2.7
Fortinet Fortimail	From 7.4.0 to 7.4.3

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortimanager	From 7.4.1 to 7.4.4
Fortinet Fortimanager	From 7.6.0 to 7.6.2

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortimanager Cloud	From 7.4.1 to 7.4.4

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortindr	From 1.5.0 to 7.4.9
Fortinet Fortindr	From 7.6.0 to 7.6.2

Configuration E

5 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortios	From 6.0.0 to 6.4.16
Fortinet Fortios	From 7.0.0 to 7.0.16
Fortinet Fortios	From 7.2.0 to 7.2.9
Fortinet Fortios	From 7.4.0 to 7.4.5
Fortinet Fortios	Version 7.6.0

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortipam	From 1.0.0 to 1.3.1

Configuration G

2 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortiproxy	From 1.0.0 to 7.2.11
Fortinet Fortiproxy	From 7.4.0 to 7.4.5

Configuration H

2 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortirecorder	From 7.0.0 to 7.0.5
Fortinet Fortirecorder	From 7.2.0 to 7.2.2

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortisase	Version 24.3.20

Configuration J

1 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortitester	From 4.2.0 to 7.4.3

Configuration K

2 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortivoice	From 6.0.7 to 6.4.10
Fortinet Fortivoice	From 7.0.0 to 7.0.5

Configuration L

2 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortiweb	From 6.4.0 to 7.4.5
Fortinet Fortiweb	Version 7.6.0

Related CWEs

CWE-201

Insertion of Sensitive Information Into Sent Data

The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

References (1)

https://fortiguard.fortinet.com/psirt/FG-IR-24-228

Source: psirt@fortinet.com

Vendor Advisory

Timeline

No history available yet.