CVE-2023-45585

An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version 7.0.0, version 6.7.6 and below, version 6.6.3 and below, version 6.5.1 and below, version 6.4.2 and below, version 6.3.3 and below, version 6.2.1 and below, version 6.1.2 and below, version 5.4.0, version 5.3.3 and below may allow an authenticated user to view an encrypted ElasticSearch password via debug log files generated when FortiSIEM is configured with ElasticSearch Event Storage.

CVSS v3 3.3 LOW

3.3^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://fortiguard.com/psirt/FG-IR-23-392	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:fortinet:fortisiem::::::::
	cpe:2.3:a:fortinet:fortisiem::::::::
	cpe:2.3:a:fortinet:fortisiem:5.4.0:::::::*
	cpe:2.3:a:fortinet:fortisiem:6.1.0:::::::*
	cpe:2.3:a:fortinet:fortisiem:6.1.1:::::::*
	cpe:2.3:a:fortinet:fortisiem:6.1.2:::::::*
	cpe:2.3:a:fortinet:fortisiem:6.2.0:::::::*
	cpe:2.3:a:fortinet:fortisiem:6.2.1:::::::*
	cpe:2.3:a:fortinet:fortisiem:6.3.0:::::::*
	cpe:2.3:a:fortinet:fortisiem:6.3.1:::::::*
	cpe:2.3:a:fortinet:fortisiem:6.3.2:::::::*
	cpe:2.3:a:fortinet:fortisiem:6.3.3:::::::*
	cpe:2.3:a:fortinet:fortisiem:6.4.0:::::::*
	cpe:2.3:a:fortinet:fortisiem:6.4.1:::::::*
	cpe:2.3:a:fortinet:fortisiem:6.4.2:::::::*
	cpe:2.3:a:fortinet:fortisiem:6.5.0:::::::*
	cpe:2.3:a:fortinet:fortisiem:6.5.1:::::::*
	cpe:2.3:a:fortinet:fortisiem:6.6.0:::::::*
	cpe:2.3:a:fortinet:fortisiem:6.6.1:::::::*
	cpe:2.3:a:fortinet:fortisiem:6.6.2:::::::*
	cpe:2.3:a:fortinet:fortisiem:6.6.3:::::::*
	cpe:2.3:a:fortinet:fortisiem:7.0.0:::::::*

History

No history.

Information

Published : 2023-11-14 18:15

Updated : 2023-11-18 03:29

NVD link : CVE-2023-45585

Mitre link : CVE-2023-45585

CVE.ORG link : CVE-2023-45585

JSON object : View

Products Affected

fortinet

fortisiem

CWE

CWE-532

Insertion of Sensitive Information into Log File

{"id": "CVE-2023-45585", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "psirt@fortinet.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 0.8}]}, "published": "2023-11-14T18:15:55.617", "references": [{"url": "https://fortiguard.com/psirt/FG-IR-23-392", "tags": ["Vendor Advisory"], "source": "psirt@fortinet.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "psirt@fortinet.com", "description": [{"lang": "en", "value": "CWE-532"}]}], "descriptions": [{"lang": "en", "value": "An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version 7.0.0, version 6.7.6 and below, version 6.6.3 and below, version 6.5.1 and below, version 6.4.2 and below, version 6.3.3 and below, version 6.2.1 and below, version 6.1.2 and below, version 5.4.0, version 5.3.3 and below may allow an authenticated user to view an encrypted ElasticSearch password via debug log files generated when FortiSIEM is configured with ElasticSearch Event Storage."}, {"lang": "es", "value": "Una inserci\u00f3n de informaci\u00f3n confidencial en la vulnerabilidad del archivo de registro [CWE-532] en FortiSIEM versi\u00f3n 7.0.0, versi\u00f3n 6.7.6 e inferior, versi\u00f3n 6.6.3 e inferior, versi\u00f3n 6.5.1 e inferior, versi\u00f3n 6.4.2 e inferior, versi\u00f3n 6.3.3 y anteriores, versi\u00f3n 6.2.1 y siguientes, versi\u00f3n 6.1.2 y siguientes, versi\u00f3n 5.4.0, versi\u00f3n 5.3.3 y siguientes pueden permitir que un usuario autenticado vea una contrase\u00f1a cifrada de ElasticSearch a trav\u00e9s de archivos de registro de depuraci\u00f3n generados cuando FortiSIEM est\u00e1 configurado con ElasticSearch Event Storage."}], "lastModified": "2023-11-18T03:29:09.223", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A0258A88-352D-4F9A-894D-F7442CAFE461", "versionEndIncluding": "5.3.3", "versionStartIncluding": "5.3.0"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E6F78C3-BFAB-446E-9E85-B2C38F35FED2", "versionEndIncluding": "6.7.6", "versionStartIncluding": "6.7.0"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:5.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "91E43A1B-D4C5-4FFF-9D3E-00140023921E"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:6.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F52E2B2-A3B1-493F-B092-77A2A44E855A"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:6.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B16CB79-AC63-41EA-AE9A-D6030449ACD3"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:6.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "912BA146-D840-4855-8C47-AC3D5E6D0C4C"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:6.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51452B16-AB83-41D3-8779-3E1AEA818AD1"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:6.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F453DE5-E31D-4BD1-8978-DD6D166045E0"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:6.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2151BD68-91C5-44F5-8DB7-C04319FDFFB0"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:6.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DC87151B-7E6D-45C6-8592-64F70E5BE459"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:6.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7DCDFD3-CE9F-487B-87B6-9E673B7BAFAB"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:6.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA88818A-DCA6-45EF-977D-ED7CA3693791"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:6.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C48AC74D-9FBE-4194-9BE8-FD2D6A0EC788"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:6.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BFFA27A5-0168-4261-9A04-D2DBB0A9946D"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:6.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2035DFA0-FF3A-4BBF-ABFE-0E310A7C668B"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:6.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A391C353-BD26-4262-B86F-E3FBF8915DCA"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:6.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EDD5BE55-0990-4646-ADA7-9A30981D4DF2"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:6.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F46426B1-B144-432C-8BA6-317617EBC110"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:6.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6590962C-FF61-4237-8F30-33B15829C8B6"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:6.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32B5BFCB-DFD4-4519-A2AF-1FABA58FA04D"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:6.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50635727-53A0-476F-BB86-A47CDAA3D45B"}, {"criteria": "cpe:2.3:a:fortinet:fortisiem:7.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CAB28BA6-45B6-422B-9901-300B6024F703"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@fortinet.com"}