Description
A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow an authenticated attacker to view cleartext password in response for Secure Message Exchange and Radius queries, if configured
References (1)
Scores
CVSS v3
5.7
EPSS
0.0001
EPSS Percentile
2.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-319
Status
published
Products (8)
Fortinet/FortiSOAR on-premise
7.3.0 - 7.3.3
Fortinet/FortiSOAR on-premise
7.4.0 - 7.4.5
Fortinet/FortiSOAR on-premise
7.5.0 - 7.5.1
Fortinet/FortiSOAR on-premise
7.6.0 - 7.6.2
Fortinet/FortiSOAR PaaS
7.3.0 - 7.3.3
Fortinet/FortiSOAR PaaS
7.4.0 - 7.4.5
Fortinet/FortiSOAR PaaS
7.5.0 - 7.5.1
Fortinet/FortiSOAR PaaS
7.6.0 - 7.6.2
Published
Apr 14, 2026
Tracked Since
Apr 14, 2026