CVE-2024-27784
Multiple Exposure of sensitive information to an unauthorized actor weaknesses [CWE-200] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an authenticated, remote attacker to retrieve sensitive in
Severity
High 8.3
CVSS 3.1
Exploited
Not listed
EPSS
0.008
51.7th percentile
Discovered by
Not disclosed
Published
Jul 9, 2024
Assigned by fortinet
Description
Multiple Exposure of sensitive information to an unauthorized actor weaknesses [CWE-200] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an authenticated, remote attacker to retrieve sensitive information from the API endpoint or log files.
Weakness: CWE-532
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Fortinet | FortiAIOps | Network & Security Management | cna-assigner |
Vendor-reported affected versions (2)
- Fortinet · FortiAIOps
- fortinet · fortiaiops
Vendor remediation
Upgrade to FortiAIOps version 2.0.1 or above