{"id":"CVE-2024-32122","aliases":["EUVD-2024-29943","GHSA-79gc-w327-w4f2"],"status":"published","title":"A storing passwords in a recoverable format in Fortinet FortiOS versions 7.2.0 through 7.2.1...","description":"A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.","severity":{"version":"3.1","score":2.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:C","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00222,"percentile":0.12959,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-257"],"published":"2025-04-08T14:02:57Z","modified":"2026-10-15T00:40:34Z","products":[{"vendor":"fortinet","product":"fortios"},{"vendor":"siemens","product":"ruggedcom ape1808"}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-24-111","tags":["Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-864900.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-32122"},{"url":"https://github.com/advisories/GHSA-79gc-w327-w4f2"}],"sources":{"cve":[{"id":"CVE-2024-32122","description":"A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.","status":"published","published":"2025-04-08T14:02:57.071Z","modified":"2026-10-15T00:40:34.693Z","cvss":[{"version":"3.1","score":2.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:C","level":"low","assessor":"cna"}],"cwes":["CWE-257"],"updated_at":"2026-11-02T14:34:15.662528Z"}],"euvd":[{"id":"EUVD-2024-29943","description":"A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.","status":"published","published":"2025-04-08T14:02:57Z","modified":"2026-10-15T00:40:34Z","cvss":[{"version":"3.1","score":2.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:C","level":"low"}],"updated_at":"2026-11-02T17:27:10.207404Z"}],"ghsa":[{"id":"GHSA-79gc-w327-w4f2","title":"A storing passwords in a recoverable format in Fortinet FortiOS versions 7.2.0 through 7.2.1...","description":"A storing passwords in a recoverable format in Fortinet FortiOS versions 7.2.0 through 7.2.1 allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.","status":"published","published":"2025-04-08T15:31:05Z","modified":"2026-06-09T12:31:58Z","cvss":[{"version":"3.1","score":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-257"],"updated_at":"2026-11-02T15:08:40.238392Z"}],"nvd":[{"id":"CVE-2024-32122","description":"A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.","status":"published","published":"2025-04-08T14:15:31.04Z","modified":"2026-06-17T07:29:19.27Z","cvss":[{"version":"3.1","score":2.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-257"],"updated_at":"2026-11-02T14:10:46.40251Z"}]}}