Low2.1Fortinet
storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all…
CVE-2024-32122 Published Apr 8, 2025Updated by vendor Oct 21, 2025
Affected products & platforms
FortinetFortiGateFirewallFortiOS
Summary
A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.
Affected versions
- FortiOS 7.4: 7.4.0 through 7.4.8
- FortiOS 7.2: 7.2 all versions
- FortiOS 7.0: 7.0 all versions
- FortiOS 6.4: 6.4 all versions
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Fixed versions
- FortiOS 7.4: 7.4.9
- FortiOS 7.2: migrate to a fixed release
- FortiOS 7.0: migrate to a fixed release
- FortiOS 6.4: migrate to a fixed release
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Mitigation checklist
Recommended fix / mitigation
- Upgrade per the Affected/Solution table: FortiOS 7.4: 7.4.9; FortiOS 7.2: migrate to a fixed release; FortiOS 7.0: migrate to a fixed release; FortiOS 6.4: migrate to a fixed release.
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.