Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7w2c-xvm6-78cm

Опубликовано: 14 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiVoice 7.0.0 through 7.0.1 may allow a remote authenticated attacker with at least read-only permission on system maintenance to access backup information via crafted HTTP requests

An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiVoice 7.0.0 through 7.0.1 may allow a remote authenticated attacker with at least read-only permission on system maintenance to access backup information via crafted HTTP requests

EPSS

Процентиль: 17%
0.00255
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 5.4
nvd
4 месяца назад

An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiVoice 7.0.0 through 7.0.1 may allow a remote authenticated attacker with at least read-only permission on system maintenance to access backup information via crafted HTTP requests

CVSS3: 5.4
fstec
4 месяца назад

Уязвимость графического пользовательского интерфейса программно-аппаратного средства обнаружения и предотвращения вторжений Fortinet FortiNDR, программного средства корпоративной телефонии FortiVoice, позволяющая злоумышленнику получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 17%
0.00255
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-200