A use of GET request method with sensitive query strings...
High severity
Unreviewed
Published
Oct 10, 2023
to the GitHub Advisory Database
•
Updated Apr 11, 2024
Description
Published by the National Vulnerability Database
Oct 10, 2023
Published to the GitHub Advisory Database
Oct 10, 2023
Last updated
Apr 11, 2024
A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5 and 7.4.0 allows an attacker to view plaintext passwords of remote services such as RDP or VNC, if the attacker is able to read the GET requests to those services.
References