Fortinet FortiOS RADIUS Accounting Server Shared Secret Exposure Vulnerability

A vulnerability allowing the insertion of sensitive information into transmitted data has been identified in Fortinet FortiOS versions 7.6.0 and 7.4.0 through 7.4.4. This vulnerability may enable an attacker in a man-in-the-middle position to intercept accounting requests and retrieve the shared secret used for RADIUS accounting server communications.

Impact

Exploitation of this vulnerability could lead to unauthorized access to the RADIUS accounting server shared secret, potentially allowing for further attacks or unauthorized actions based on that secret.