説明
An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may allow an attacker in a man-in-the-middle position to retrieve the RADIUS accounting server shared secret via intercepting accounting-requests.
AI分析AIによる分析
影響を受ける製品
fortinetfortios
fortinetfortios
7.6.0
参照
- https://fortiguard.fortinet.com/psirt/FG-IR-24-326Vendor Advisory