An insufficiently protected credentials vulnerability exists in Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. This flaw may allow an unauthenticated attacker to obtain sensitive information via HTTPS requests. The vulnerability has a high severity rating with a CVSS score of 7.5. No public exploits or patches are currently documented.