BetaIT-Hub is in early access — your feedback helps us improve. Use the chat or email [email protected]

News Vulnerability
VulnerabilityFortinet PSIRT·51d ago

Cleartext Credentials in response for API endpoints

CVSSv3 Score: 6.2 A Cleartext Transmission of Sensitive Information vulnerability [CWE-319] in FortiSOAR may allow an authenticated attacker to view cleartext password in response for Secure Message Exchange and Radius queries, if configured Revised on 2026-04-14 00:00:00

Sign in to read the full article

Create a free account to access all news, downloads, and community features

Originally published by Fortinet PSIRT

Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-106

This article is shared for informational purposes. All rights belong to the original author and publisher. If you are the copyright holder and would like this content removed, please contact us.

Shared on IT-Hub by admin