{"id":"CVE-2023-26207","aliases":["EUVD-2023-30032","GHSA-6h43-h44j-jrm6"],"status":"published","title":"An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0...","description":"An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy 7.0.0 through 7.0.10. 7.2.0 through 7.2.1 allows an attacker to read certain passwords in plain text.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:C","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.005,"percentile":0.432,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-532"],"published":"2023-06-13T08:41:45Z","modified":"2026-06-17T05:42:49Z","products":[{"vendor":"fortinet","product":"fortios"},{"vendor":"fortinet","product":"fortiproxy"}],"references":[{"url":"https://fortiguard.com/psirt/FG-IR-22-455","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26207"},{"url":"https://github.com/advisories/GHSA-6h43-h44j-jrm6"}],"sources":{"cve":[{"id":"CVE-2023-26207","description":"An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy 7.0.0 through 7.0.10. 7.2.0 through 7.2.1 allows an attacker to read certain passwords in plain text.","status":"published","published":"2023-06-13T08:41:45.823Z","modified":"2024-10-22T20:45:42.886Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:C","level":"low","assessor":"cna"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:35:15.434947Z"}],"euvd":[{"id":"EUVD-2023-30032","description":"An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy 7.0.0 through 7.0.10. 7.2.0 through 7.2.1 allows an attacker to read certain passwords in plain text.","status":"published","published":"2023-06-13T08:41:45Z","modified":"2024-10-22T20:45:42Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:C","level":"low"}],"updated_at":"2026-11-03T00:05:22.224445Z"}],"ghsa":[{"id":"GHSA-6h43-h44j-jrm6","title":"An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0...","description":"An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy 7.0.0 through 7.0.10. 7.2.0 through 7.2.1 allows an attacker to read certain passwords in plain text.","status":"published","published":"2023-06-13T09:30:19Z","modified":"2024-04-04T04:45:38Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:56:26.754135Z"}],"nvd":[{"id":"CVE-2023-26207","description":"An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy 7.0.0 through 7.0.10. 7.2.0 through 7.2.1 allows an attacker to read certain passwords in plain text.","status":"published","published":"2023-06-13T09:15:16.467Z","modified":"2026-06-17T05:42:49.427Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:08:06.335469Z"}]}}