← Database

CVE-2024-40593

MEDIUM CVSS: 6.0 Published: 2025-12-11 Modified: 2026-06-17

Description

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6.4 all versions, FortiOS 7.6.0, FortiOS 7.4.4, FortiOS 7.2.7, FortiOS 7.0.14, FortiPortal 6.0 all versions may allow an authenticated admin to retrieve a certificate's private key via the device's admin shell.

Affected Platforms

Fortinet FortiosFortinet FortianalyzerFortinet FortiportalFortinet Fortimanager

Weakness Type

CWE-320, NVD-CWE-noinfo

References