CVE-2023-45585

Summary

CVE-2023-45585 is a vulnerability affecting multiple FortiSIEM versions, including 7.0.0, 6.7.6 and below, 6.6.3 and below, 6.5.1 and below, 6.4.2 and below, 6.3.3 and below, 6.2.1 and below, 6.1.2 and below, 5.4.0, and 5.3.3 and below. This issue, classified as CWE-532, allows authenticated users to access encrypted ElasticSearch passwords by inserting sensitive information into debug log files. FortiSIEM's ElasticSearch Event Storage configuration contributes to this vulnerability. Despite the logs being encrypted, the vulnerability exposes the passwords upon generation of the debug logs. Users are advised to upgrade their FortiSIEM versions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.