VULNERABILITY INTELLIGENCE

CVE-2021-41023

CVSS score5.5 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2021-11-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

A unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows an authenticated user to disclosure agent password due to plaintext credential storage in log files

Weakness classification

  • nvd@nist.gov: CWE-522

Primary references