CVE-2024-32122

—

CVSS 3.1

4.4 medium

EPSS

<1%p12

Published

Apr 8, 2025 (Apr 8, 2025)

Modified

Jun 17, 2026

Description

A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.

Vendors: fortinet
Products: fortios
Weakness: CWE-257
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.