CVE-2024-40593
MEDIUM
6.0
CVSS Severity Score
Vulnerability Description
A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6.4 all versions, FortiOS 7.6.0, FortiOS 7.4.4, FortiOS 7.2.7, FortiOS 7.0.14, FortiPortal 6.0 all versions may allow an authenticated admin to retrieve a certificate's private key via the device's admin shell.
Affected Platforms (CPE)
📦
Fortinet
Fortianalyzer
>= 6.4.0 and < 7.2.6>= 7.4.0 and < 7.4.3
📦
Fortinet
Fortimanager
>= 6.4.0 and < 7.2.6>= 7.4.0 and < 7.4.3
💻
Fortinet
Fortios
= 7.0.14= 7.2.7= 7.4.4= 7.6.0
📦
Fortinet
Fortiportal
>= 6.0.0 and <= 6.0.15