VULNERABILITY INTELLIGENCE

CVE-2024-40593

CVSS score6 MEDIUM
EPSS probability0.11%
CISA KEVNot currently listed
Published2025-12-11
Last modified2026-10-02
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Description

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6.4 all versions, FortiOS 7.6.0, FortiOS 7.4.4, FortiOS 7.2.7, FortiOS 7.0.14, FortiPortal 6.0 all versions may allow an authenticated admin to retrieve a certificate's private key via the device's admin shell.

Weakness classification

  • psirt@fortinet.com: CWE-320
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references