CVE-2024-46665: An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may allow an attacker in a...
3.5
CVSS
Description
An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may allow an attacker in a man-in-the-middle position to retrieve the RADIUS accounting server shared secret via intercepting accounting-requests.
Classification
CVE ID: CVE-2024-46665
CVSS Base Severity: LOW
CVSS Base Score: 3.5
Affected Products
Vendor: Fortinet
Product: FortiOS
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 19.27% (scored less or equal to compared to others)
EPSS Date: 2025-02-12 (when was this score calculated)