| Package | Affected versions | Patched versions |
|---|---|---|
| fortiportal | = 7.4.0≥ 7.0.0, < 7.0.10≥ 7.2.0, < 7.2.6 | 7.0.107.2.6 |
A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.9 may allow an authenticated attacker with at least read-only admin permissions to view encrypted secrets via the FortiPortal System Log.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free