4.0
Moyenne
CVE-2021-24005 Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions…
Description
Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions before 6.3.0 may allow an attacker with access to the files or the CLI configuration to decrypt the sensitive data, via knowledge of the hard-coded key.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiAuthenticator | Versions non publiées |
Autres CVE de FortiAuthenticator
Les 11 CVE de FortiAuthenticator →
CVE-2025-53379
A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all…
7.0
Élevée
CVE-2026-44277
A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0,…
9.1
Critique
CVE-2026-21743
A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all…
6.8
Moyenne
CVE-2025-57823
A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6,…
2.6
Faible