漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.4, FortiSOAR on-premise 7.5.0 through 7.5.2, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated remote attacker to retrieve passwords for multiple installed connectors via server address modification in connector configuration.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
以可恢复格式存储口令
Vulnerability Title
Fortinet FortiSOAR PaaS和Fortinet FortiSOAR on-premise 安全漏洞
Vulnerability Description
Fortinet FortiSOAR PaaS和Fortinet FortiSOAR on-premise都是美国飞塔(Fortinet)公司的一款安全编排、自动化和响应软件。 Fortinet FortiSOAR PaaS和Fortinet FortiSOAR on-premise存在安全漏洞,该漏洞源于以可恢复格式存储密码,可能导致经过身份验证的远程攻击者检索多个已安装连接器的密码。以下版本受到影响:Fortinet FortiSOAR PaaS 7.6.4及之前版本、7.5.2及之前版本、7.4版本
CVSS Information
N/A
Vulnerability Type
N/A