CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.0. It affects Fortinet, FortiOS.
CVE
CVE-2024-40593
Severity
MEDIUM
CVSS
6
EPSS
0.10%
Fortinet FortiOS
Original NVD Description
A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6.4 all versions, FortiOS 7.6.0, FortiOS 7.4.4, FortiOS 7.2.7, FortiOS 7.0.14, FortiPortal 6.0 all versions may allow an authenticated admin to retrieve a certificate's private key via the device's admin shell.
Related CVEs
Other vulnerabilities affecting the same vendor(s)