Servers and applications
CVE-2024-23662
An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7.4.0 through 7.4.1 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.15 and 6.4.0 through 6.4.15 allows attacker to information disclosure via HTTP requests.
- Severity
- High 7.5
- Published
- 9 Apr 2024
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 7.2.6, 7.4.2
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Fortinet FortiOSServers and applications · cpe:o:fortinet:fortios |
|