CVE-2024-32122: Information disclosure in Fortinet FortiOS
A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.
AI Analysis
Technical Summary
This vulnerability in Fortinet FortiOS affects multiple major versions (6.4, 7.0, 7.2, and 7.4.0 through 7.4.8) and involves storing passwords in a recoverable format. An attacker with high privileges can modify the LDAP server IP configuration to redirect authentication requests to a malicious server, which may lead to information disclosure. The CVSS 3.1 base score is 2.1, reflecting low impact and requiring local access with high privileges. The vendor has not released an official patch but has provided a workaround as the remediation level.
Potential Impact
The impact is limited to information disclosure of passwords stored in a recoverable format. Exploitation requires an attacker to have high privileges on the system to modify LDAP server IP settings. There is no impact on integrity or availability, and no known active exploitation has been reported.
Mitigation Recommendations
Currently, no official patch is available. The vendor has designated the remediation level as a workaround. Users should apply any recommended configuration changes or operational workarounds provided by Fortinet to mitigate the risk. Monitor Fortinet advisories for updates on official fixes.
CVE-2024-32122: Information disclosure in Fortinet FortiOS
Description
A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.
CVSS v3.1
Score 2.1low
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Fortinet FortiOS affects multiple major versions (6.4, 7.0, 7.2, and 7.4.0 through 7.4.8) and involves storing passwords in a recoverable format. An attacker with high privileges can modify the LDAP server IP configuration to redirect authentication requests to a malicious server, which may lead to information disclosure. The CVSS 3.1 base score is 2.1, reflecting low impact and requiring local access with high privileges. The vendor has not released an official patch but has provided a workaround as the remediation level.
Potential Impact
The impact is limited to information disclosure of passwords stored in a recoverable format. Exploitation requires an attacker to have high privileges on the system to modify LDAP server IP settings. There is no impact on integrity or availability, and no known active exploitation has been reported.
Mitigation Recommendations
Currently, no official patch is available. The vendor has designated the remediation level as a workaround. Users should apply any recommended configuration changes or operational workarounds provided by Fortinet to mitigate the risk. Monitor Fortinet advisories for updates on official fixes.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- fortinet
- Date Reserved
- 2024-04-11T12:09:46.571Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- workaround
Threat ID: 691ca899209f2030fa01698b
Added to database: 11/18/2025, 17:10:49 UTC
Last enriched: 08/11/2026, 13:04:50 UTC
Last updated: 09/10/2026, 19:36:48 UTC
Views: 380
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.