VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Mar 14, 2025· Updated Jun 17, 2026

CVE-2024-40585

CVE-2024-40585

Description

An insertion of sensitive information into log file vulnerabilities [CWE-532] in FortiManager version 7.4.0, version 7.2.3 and below, version 7.0.8 and below, version 6.4.12 and below, version 6.2.11 and below and FortiAnalyzer version 7.4.0, version 7.2.3 and below, version 7.0.8 and below, version 6.4.12 and below, version 6.2.11 and below eventlog may allow any low privileged user with access to event log section to retrieve certificate private key and encrypted password logged as system log.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Fortinet/Fortianalyzer4 versions
    cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*range: >=6.2.0,<6.2.12
    • cpe:2.3:a:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortianalyzer:7.4.0:*:*:*:*:*:*:*range: 7.4.0
    • (no CPE)range: 7.4.0, 7.2.3 and below, 7.0.8 and below, 6.4.12 and below, 6.2.11 and below
  • Fortinet/Fortimanager4 versions
    cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*range: >=6.2.0,<7.0.9
    • cpe:2.3:a:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortimanager:7.4.0:*:*:*:*:*:*:*range: 7.4.0
    • (no CPE)range: 7.4.0, 7.2.3 and below, 7.0.8 and below, 6.4.12 and below, 6.2.11 and below

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.