CVE-2021-41023

5.5 mediumEPSS 0.2%

Medium (5.5) in fortinet fortisiem. EPSS 0.2% chance of exploitation in the next 30 days.

A unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows an authenticated user to disclosure agent password due to plaintext credential storage in log files

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
CWE: CWE-522
Published: 2021-11-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortisiem

References

https://fortiguard.com/advisory/FG-IR-21-175
https://fortiguard.com/advisory/FG-IR-21-175

Check your stack JSON