CVE-2024-40593

Name of the Vulnerable Software and Affected Versions Fortinet FortiAnalyzer versions 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.5, 7.4.0 through 7.4.2 Fortinet FortiManager versions 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.5, 7.4.0 through 7.4.2 Fortinet FortiOS versions 7.0.14, 7.2.7, 7.4.4, 7.6.0 Fortinet FortiPortal versions 6.0 all versions

Description A key management issue exists that may allow an authenticated administrator to obtain a certificate's private key through the device's admin shell.

Recommendations Fortinet FortiAnalyzer versions 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.5, 7.4.0 through 7.4.2: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Fortinet FortiManager versions 6.4 all versions, 7.0 all versions, 7.2.0 through 7.2.5, 7.4.0 through 7.4.2: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Fortinet FortiOS versions 7.0.14, 7.2.7, 7.4.4, 7.6.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Fortinet FortiPortal versions 6.0 all versions: At the moment, there is no information about a newer version that contains a fix for this vulnerability.