漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated attacker to view cleartext password in response for Secure Message Exchange and Radius queries, if configured
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Vulnerability Type
敏感数据的明文传输
Vulnerability Title
Fortinet FortiSOAR PaaS和Fortinet FortiSOAR on-premise 安全漏洞
Vulnerability Description
Fortinet FortiSOAR PaaS和Fortinet FortiSOAR on-premise都是美国飞塔(Fortinet)公司的一款安全编排、自动化和响应软件。 Fortinet FortiSOAR PaaS和Fortinet FortiSOAR on-premise存在安全漏洞,该漏洞源于敏感信息的明文传输,可能导致身份验证攻击者查看明文密码。以下版本受到影响:FortiSOAR PaaS 7.6.0至7.6.3版本、FortiSOAR PaaS 7.5.0至7.5.2版本、FortiS
CVSS Information
N/A
Vulnerability Type
N/A