Fortinet FortiPortal Sensitive Information Log Exposure Vulnerability

A vulnerability exists in Fortinet FortiPortal in versions 7.4.0, 7.2.0 through 7.2.5, and 7.0.0 through 7.0.9, allowing an authenticated attacker with read-only admin permissions to access encrypted secrets through the FortiPortal System Log. This issue arises from the improper handling of sensitive information, which is inadvertently logged and can be viewed by users with the appropriate permissions.

Impact

Exploitation of this vulnerability could lead to unauthorized access to encrypted sensitive information, potentially allowing for further attacks or exploitation.