{"id":"CVE-2024-47569","title":"A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, F…","summary":"A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, F…","severity":"medium","cvss":4.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:F/RL:U/RC:C","cvssSource":"cna","cwe":["CWE-201"],"vendor":"Fortinet","product":"FortiManager","affected":["FortiManager >= 7.6.0 <= 7.6.1","FortiManager >= 7.4.1 <= 7.4.3","FortiOS 7.6.0","FortiOS >= 7.4.0 <= 7.4.4","FortiOS >= 7.2.0 <= 7.2.8","FortiOS >= 7.0.0 <= 7.0.15","FortiOS >= 6.4.0 <= 6.4.15","FortiOS >= 6.2.0 <= 6.2.17","FortiOS >= 6.0.0 <= 6.0.18","FortiProxy >= 7.4.0 <= 7.4.4","FortiProxy >= 7.2.0 <= 7.2.10","FortiProxy >= 7.0.0 <= 7.0.23","FortiProxy >= 2.0.0 <= 2.0.14","FortiProxy >= 1.2.1 <= 1.2.13","FortiProxy 01.02.00","FortiProxy >= 1.1.4 <= 1.1.6","FortiProxy >= 01.01.00 <= 01.01.03","FortiProxy >= 01.00.00 <= 01.00.07","FortiWeb 7.6.0","FortiWeb >= 7.4.0 <= 7.4.4","FortiWeb >= 7.2.0 <= 7.2.13","FortiWeb >= 7.0.0 <= 7.0.12","FortiWeb >= 6.4.0 <= 6.4.3","FortiVoice >= 7.0.0 <= 7.0.4","FortiVoice >= 6.4.0 <= 6.4.9","FortiVoice >= 6.0.7 <= 6.0.12","FortiTester >= 7.4.0 <= 7.4.2","FortiTester >= 7.3.0 <= 7.3.2","FortiTester >= 7.2.0 <= 7.2.3","FortiTester >= 7.1.0 <= 7.1.1","FortiTester 7.0.0","FortiTester >= 4.2.0 <= 4.2.1","FortiPAM >= 1.3.0 <= 1.3.1","FortiPAM 1.2.0","FortiPAM >= 1.1.0 <= 1.1.2","FortiPAM >= 1.0.0 <= 1.0.3","FortiNDR >= 7.6.0 <= 7.6.1","FortiNDR >= 7.4.0 <= 7.4.8","FortiNDR >= 7.2.0 <= 7.2.5","FortiNDR >= 7.1.0 <= 7.1.1","FortiNDR >= 7.0.0 <= 7.0.7","FortiNDR >= 1.5.0 <= 1.5.3","FortiMail >= 7.4.0 <= 7.4.2","FortiMail >= 7.2.0 <= 7.2.6","FortiMail >= 7.0.0 <= 7.0.9","FortiRecorder >= 7.2.0 <= 7.2.1","FortiRecorder >= 7.0.0 <= 7.0.4","fortimanager_cloud >= 7.4.1 <= 7.4.3"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2025-10-16T15:31:45.922521Z"},"published":"2025-10-14","updated":"2026-10-22","sourceUpdated":"2026-10-22T13:48:36.272Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-47569","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-228","label":"https://fortiguard.fortinet.com/psirt/FG-IR-24-228"}],"tags":["cve.org"],"epss":0.00473,"epssPercentile":0.39909,"ingestedAt":"2026-10-22T22:00:50.276Z","slug":"CVE-2024-47569","body":"## Overview\n\nA insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiNDR 7.6.0 through 7.6.1, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiNDR 1.5 all versions, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.4, FortiProxy 7.2.0 through 7.2.10, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions, FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiTester 7.4.0 through 7.4.2, FortiTester 7.3 all versions, FortiTester 7.2 all versions, FortiTester 7.1 all versions, FortiTester 7.0 all versions, FortiTester 4.2 all versions, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0.7 through 6.0.12, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions allows attacker to disclose sensitive information via specially crafted packets.\n\n## Affected\n\n- `FortiManager >= 7.6.0 <= 7.6.1`\n- `FortiManager >= 7.4.1 <= 7.4.3`\n- `FortiOS 7.6.0`\n- `FortiOS >= 7.4.0 <= 7.4.4`\n- `FortiOS >= 7.2.0 <= 7.2.8`\n- `FortiOS >= 7.0.0 <= 7.0.15`\n- `FortiOS >= 6.4.0 <= 6.4.15`\n- `FortiOS >= 6.2.0 <= 6.2.17`\n- `FortiOS >= 6.0.0 <= 6.0.18`\n- `FortiProxy >= 7.4.0 <= 7.4.4`\n- `FortiProxy >= 7.2.0 <= 7.2.10`\n- `FortiProxy >= 7.0.0 <= 7.0.23`\n- `FortiProxy >= 2.0.0 <= 2.0.14`\n- `FortiProxy >= 1.2.1 <= 1.2.13`\n- `FortiProxy 01.02.00`\n- `FortiProxy >= 1.1.4 <= 1.1.6`\n- `FortiProxy >= 01.01.00 <= 01.01.03`\n- `FortiProxy >= 01.00.00 <= 01.00.07`\n- `FortiWeb 7.6.0`\n- `FortiWeb >= 7.4.0 <= 7.4.4`\n- `FortiWeb >= 7.2.0 <= 7.2.13`\n- `FortiWeb >= 7.0.0 <= 7.0.12`\n- `FortiWeb >= 6.4.0 <= 6.4.3`\n- `FortiVoice >= 7.0.0 <= 7.0.4`\n- `FortiVoice >= 6.4.0 <= 6.4.9`\n- `FortiVoice >= 6.0.7 <= 6.0.12`\n- `FortiTester >= 7.4.0 <= 7.4.2`\n- `FortiTester >= 7.3.0 <= 7.3.2`\n- `FortiTester >= 7.2.0 <= 7.2.3`\n- `FortiTester >= 7.1.0 <= 7.1.1`\n- `FortiTester 7.0.0`\n- `FortiTester >= 4.2.0 <= 4.2.1`\n- `FortiPAM >= 1.3.0 <= 1.3.1`\n- `FortiPAM 1.2.0`\n- `FortiPAM >= 1.1.0 <= 1.1.2`\n- `FortiPAM >= 1.0.0 <= 1.0.3`\n- `FortiNDR >= 7.6.0 <= 7.6.1`\n- `FortiNDR >= 7.4.0 <= 7.4.8`\n- `FortiNDR >= 7.2.0 <= 7.2.5`\n- `FortiNDR >= 7.1.0 <= 7.1.1`\n- `FortiNDR >= 7.0.0 <= 7.0.7`\n- `FortiNDR >= 1.5.0 <= 1.5.3`\n- `FortiMail >= 7.4.0 <= 7.4.2`\n- `FortiMail >= 7.2.0 <= 7.2.6`\n- `FortiMail >= 7.0.0 <= 7.0.9`\n- `FortiRecorder >= 7.2.0 <= 7.2.1`\n- `FortiRecorder >= 7.0.0 <= 7.0.4`\n- `fortimanager_cloud >= 7.4.1 <= 7.4.3`\n\n## Remediation\n\nUpgrade to FortiWeb version 7.6.1 or above\nUpgrade to FortiWeb version 7.4.5 or above\nUpgrade to FortiVoice version 7.2.0 or above\nUpgrade to FortiVoice version 7.0.5 or above\nUpgrade to FortiVoice version 6.4.10 or above\nUpgrade to FortiTester version 7.6.0 or above\nUpgrade to FortiTester version 7.4.3 or above\nUpgrade to FortiRecorder version 7.2.2 or above\nUpgrade to FortiRecorder version 7.0.5 or above\nUpgrade to FortiProxy version 7.4.5 or above\nUpgrade to FortiProxy version 7.2.11 or above\nUpgrade to FortiPAM version 1.5.0 or above\nUpgrade to FortiPAM version 1.4.0 or above\nUpgrade to FortiOS version 7.6.1 or above\nUpgrade to FortiOS version 7.4.5 or above\nUpgrade to FortiOS version 7.2.9 or above\nUpgrade to FortiOS version 7.0.16 or above\nUpgrade to FortiOS version 6.4.16 or above\nUpgrade to FortiNDR version 7.6.2 or above\nUpgrade to FortiNDR version 7.4.9 or above\nUpgrade to FortiManager version 7.6.2 or above\nUpgrade to FortiManager version 7.4.4 or above\nUpgrade to FortiManager Cloud version 7.4.4 or above\nUpgrade to FortiMail version 7.6.0 or above\nUpgrade to FortiMail version 7.4.3 or above\nUpgrade to FortiMail version 7.2.7 or above","depth":"sunlit","depthScore":23,"depthScoreParts":{"impact":23.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}