Fortinet FortiFone Sensitive Information Exposure Vulnerability

A vulnerability allowing unauthorized access to sensitive information has been identified in Fortinet FortiFone versions 7.0.0 through 7.0.1 and 3.0.13 through 3.0.23. This vulnerability allows an unauthenticated attacker to obtain the device configuration by sending crafted HTTP or HTTPS requests.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive device configuration information.

Remediation

Users can upgrade to Fortinet FortiFone version 7.0.2 or above, or version 3.0.24 or above, depending on their current version.