A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to information disclosure via re-using the enrollment code.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://fortiguard.fortinet.com/psirt/FG-IR-25-160 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 4.4 · fortinetNVD modified 2026-10-09 10:10
Affected (CPE criteria) 1
cpe:2.3:a:fortinet:fortidlp_agent:*:*:*:*:*:*:*:*
References 1
- https://fortiguard.fortinet.com/psirt/FG-IR-25-160 Vendor Advisory