--- id: CVE-2024-47569 title: >- A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, F… summary: >- A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, F… severity: medium cvss: 4.2 cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:F/RL:U/RC:C' cvssSource: cna cwe: - CWE-201 vendor: Fortinet product: FortiManager affected: - FortiManager >= 7.6.0 <= 7.6.1 - FortiManager >= 7.4.1 <= 7.4.3 - FortiOS 7.6.0 - FortiOS >= 7.4.0 <= 7.4.4 - FortiOS >= 7.2.0 <= 7.2.8 - FortiOS >= 7.0.0 <= 7.0.15 - FortiOS >= 6.4.0 <= 6.4.15 - FortiOS >= 6.2.0 <= 6.2.17 - FortiOS >= 6.0.0 <= 6.0.18 - FortiProxy >= 7.4.0 <= 7.4.4 - FortiProxy >= 7.2.0 <= 7.2.10 - FortiProxy >= 7.0.0 <= 7.0.23 - FortiProxy >= 2.0.0 <= 2.0.14 - FortiProxy >= 1.2.1 <= 1.2.13 - FortiProxy 01.02.00 - FortiProxy >= 1.1.4 <= 1.1.6 - FortiProxy >= 01.01.00 <= 01.01.03 - FortiProxy >= 01.00.00 <= 01.00.07 - FortiWeb 7.6.0 - FortiWeb >= 7.4.0 <= 7.4.4 - FortiWeb >= 7.2.0 <= 7.2.13 - FortiWeb >= 7.0.0 <= 7.0.12 - FortiWeb >= 6.4.0 <= 6.4.3 - FortiVoice >= 7.0.0 <= 7.0.4 - FortiVoice >= 6.4.0 <= 6.4.9 - FortiVoice >= 6.0.7 <= 6.0.12 - FortiTester >= 7.4.0 <= 7.4.2 - FortiTester >= 7.3.0 <= 7.3.2 - FortiTester >= 7.2.0 <= 7.2.3 - FortiTester >= 7.1.0 <= 7.1.1 - FortiTester 7.0.0 - FortiTester >= 4.2.0 <= 4.2.1 - FortiPAM >= 1.3.0 <= 1.3.1 - FortiPAM 1.2.0 - FortiPAM >= 1.1.0 <= 1.1.2 - FortiPAM >= 1.0.0 <= 1.0.3 - FortiNDR >= 7.6.0 <= 7.6.1 - FortiNDR >= 7.4.0 <= 7.4.8 - FortiNDR >= 7.2.0 <= 7.2.5 - FortiNDR >= 7.1.0 <= 7.1.1 - FortiNDR >= 7.0.0 <= 7.0.7 - FortiNDR >= 1.5.0 <= 1.5.3 - FortiMail >= 7.4.0 <= 7.4.2 - FortiMail >= 7.2.0 <= 7.2.6 - FortiMail >= 7.0.0 <= 7.0.9 - FortiRecorder >= 7.2.0 <= 7.2.1 - FortiRecorder >= 7.0.0 <= 7.0.4 - fortimanager_cloud >= 7.4.1 <= 7.4.3 ssvc: exploitation: none automatable: 'no' technicalImpact: partial timestamp: '2025-10-16T15:31:45.922521Z' published: '2025-10-14' updated: '2026-10-22' sourceUpdated: '2026-10-22T13:48:36.272Z' source: CVEORG sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-47569' references: - url: 'https://fortiguard.fortinet.com/psirt/FG-IR-24-228' label: 'https://fortiguard.fortinet.com/psirt/FG-IR-24-228' tags: - cve.org epss: 0.00473 epssPercentile: 0.39909 ingestedAt: '2026-10-22T22:00:50.276Z' --- ## Overview A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiNDR 7.6.0 through 7.6.1, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiNDR 1.5 all versions, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4.0 through 6.4.15, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.4, FortiProxy 7.2.0 through 7.2.10, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions, FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiTester 7.4.0 through 7.4.2, FortiTester 7.3 all versions, FortiTester 7.2 all versions, FortiTester 7.1 all versions, FortiTester 7.0 all versions, FortiTester 4.2 all versions, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0.7 through 6.0.12, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions allows attacker to disclose sensitive information via specially crafted packets. ## Affected - `FortiManager >= 7.6.0 <= 7.6.1` - `FortiManager >= 7.4.1 <= 7.4.3` - `FortiOS 7.6.0` - `FortiOS >= 7.4.0 <= 7.4.4` - `FortiOS >= 7.2.0 <= 7.2.8` - `FortiOS >= 7.0.0 <= 7.0.15` - `FortiOS >= 6.4.0 <= 6.4.15` - `FortiOS >= 6.2.0 <= 6.2.17` - `FortiOS >= 6.0.0 <= 6.0.18` - `FortiProxy >= 7.4.0 <= 7.4.4` - `FortiProxy >= 7.2.0 <= 7.2.10` - `FortiProxy >= 7.0.0 <= 7.0.23` - `FortiProxy >= 2.0.0 <= 2.0.14` - `FortiProxy >= 1.2.1 <= 1.2.13` - `FortiProxy 01.02.00` - `FortiProxy >= 1.1.4 <= 1.1.6` - `FortiProxy >= 01.01.00 <= 01.01.03` - `FortiProxy >= 01.00.00 <= 01.00.07` - `FortiWeb 7.6.0` - `FortiWeb >= 7.4.0 <= 7.4.4` - `FortiWeb >= 7.2.0 <= 7.2.13` - `FortiWeb >= 7.0.0 <= 7.0.12` - `FortiWeb >= 6.4.0 <= 6.4.3` - `FortiVoice >= 7.0.0 <= 7.0.4` - `FortiVoice >= 6.4.0 <= 6.4.9` - `FortiVoice >= 6.0.7 <= 6.0.12` - `FortiTester >= 7.4.0 <= 7.4.2` - `FortiTester >= 7.3.0 <= 7.3.2` - `FortiTester >= 7.2.0 <= 7.2.3` - `FortiTester >= 7.1.0 <= 7.1.1` - `FortiTester 7.0.0` - `FortiTester >= 4.2.0 <= 4.2.1` - `FortiPAM >= 1.3.0 <= 1.3.1` - `FortiPAM 1.2.0` - `FortiPAM >= 1.1.0 <= 1.1.2` - `FortiPAM >= 1.0.0 <= 1.0.3` - `FortiNDR >= 7.6.0 <= 7.6.1` - `FortiNDR >= 7.4.0 <= 7.4.8` - `FortiNDR >= 7.2.0 <= 7.2.5` - `FortiNDR >= 7.1.0 <= 7.1.1` - `FortiNDR >= 7.0.0 <= 7.0.7` - `FortiNDR >= 1.5.0 <= 1.5.3` - `FortiMail >= 7.4.0 <= 7.4.2` - `FortiMail >= 7.2.0 <= 7.2.6` - `FortiMail >= 7.0.0 <= 7.0.9` - `FortiRecorder >= 7.2.0 <= 7.2.1` - `FortiRecorder >= 7.0.0 <= 7.0.4` - `fortimanager_cloud >= 7.4.1 <= 7.4.3` ## Remediation Upgrade to FortiWeb version 7.6.1 or above Upgrade to FortiWeb version 7.4.5 or above Upgrade to FortiVoice version 7.2.0 or above Upgrade to FortiVoice version 7.0.5 or above Upgrade to FortiVoice version 6.4.10 or above Upgrade to FortiTester version 7.6.0 or above Upgrade to FortiTester version 7.4.3 or above Upgrade to FortiRecorder version 7.2.2 or above Upgrade to FortiRecorder version 7.0.5 or above Upgrade to FortiProxy version 7.4.5 or above Upgrade to FortiProxy version 7.2.11 or above Upgrade to FortiPAM version 1.5.0 or above Upgrade to FortiPAM version 1.4.0 or above Upgrade to FortiOS version 7.6.1 or above Upgrade to FortiOS version 7.4.5 or above Upgrade to FortiOS version 7.2.9 or above Upgrade to FortiOS version 7.0.16 or above Upgrade to FortiOS version 6.4.16 or above Upgrade to FortiNDR version 7.6.2 or above Upgrade to FortiNDR version 7.4.9 or above Upgrade to FortiManager version 7.6.2 or above Upgrade to FortiManager version 7.4.4 or above Upgrade to FortiManager Cloud version 7.4.4 or above Upgrade to FortiMail version 7.6.0 or above Upgrade to FortiMail version 7.4.3 or above Upgrade to FortiMail version 7.2.7 or above