CoreCVE
Back

HIGH

Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions before 6.3.0 may allow an attacker with access to the files or the CLI configuration to decrypt the sensitive data, via knowledge of the hard-coded key

Published Jul 6, 2021

Description

Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions before 6.3.0 may allow an attacker with access to the files or the CLI configuration to decrypt the sensitive data, via knowledge of the hard-coded key.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner fortinet
Published Jul 6, 2021
Updated Oct 25, 2024
Reserved Jan 13, 2021
Link CVE-2021-24005

CISA Vulnrichment

Updated Oct 23, 2024

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2021-24005

Red Hat

No data

ENISA EUVD

Assigner fortinet
Published Jul 6, 2021
Updated Oct 25, 2024
Link EUVD-2021-10925

GitHub

No data