> Cleartext Credentials in response for API endpoints
[DATE: 14/04/2026 07:00]
[LANGUAGE: EN]
CVSSv3 Score:
6.2
A Cleartext Transmission of Sensitive Information vulnerability [CWE-319] in FortiSOAR may allow an authenticated attacker to view cleartext password in response for Secure Message Exchange and Radius queries, if configured
Revised on 2026-04-14 00:00:00