CVE-2024-46665

low

Description

An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may allow an attacker in a man-in-the-middle position to retrieve the RADIUS accounting server shared secret via intercepting accounting-requests.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-06

https://fortiguard.fortinet.com/psirt/FG-IR-24-326

Details

Source: Mitre, NVD

Published: 2025-01-14

Updated: 2025-01-31

Risk Information

CVSS v2

Base Score: 2.6

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:N/A:N

Severity: Low

CVSS v3

Base Score: 3.7

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N