CVE-2024-47570

score

<0.1

cvss

6.6

epss

0.4%

published

2025-12-09

kev added

—

first seen

2026-10-21

Fortinet FortiOS 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0 all versions; FortiProxy 7.4.0 through 7.4.3, 7.2.0 through 7.2.11; FortiPAM 1.0 through 1.4 all versions; and FortiSRA 1.4 all versions contain an information disclosure caused by insertion of sensitive API tokens into REST API logs, letting read-only administrators retrieve other administrators' API tokens if REST API logging is enabled, exploit requires REST API logging enabled.