CVE-2024-32122CWE-257

A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all…

Low · published April 8, 2025

CVSS v3.1
2.1
EPSS
0%
Percentile
11.6
In the wild
Unconfirmed
What it is

A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.

The record
Technical detail
CVSS v3.1
2.1 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:C
CVSS v4.0
Not supplied
EPSS
0.00218 · 11.6th percentile
Weakness
CWE-257 · Storing Passwords in a Recoverable Format
Published
2025-04-08T14:02Z
EPSS history
Timeline
  • 08 APR 14:02Z
    A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all…
    cvelistv5