Full path disclosure vulnerability Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-23-126 Final 1 1 2023-09-13T00:00:00 Current version 2023-09-13T00:00:00 2023-09-13T00:00:00 An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiSIEM may allow an authenticated attacker to obtain the absolute path of files used by the supervisor, which could be dangerous if used in conjunction with other vulnerabilities. None Information disclosure FortiSIEM 7.0 all versions are not affectedFortiSIEM version 6.7.0 through 6.7.5FortiSIEM 6.6 all versions are not affectedFortiSIEM 6.5 all versions are not affectedFortiSIEM 6.4 all versions are not affectedFortiSIEM 6.3 all versions are not affectedFortiSIEM 6.2 all versions are not affectedFortiSIEM 6.1 all versions are not affectedFortiSIEM 5.4 all versions are not affectedFortiSIEM 5.3 all versions are not affected Please upgrade to FortiSIEM version 7.0.0 or abovePlease upgrade to FortiSIEM version 6.7.6 or abovePlease upgrade to FortiSIEM version 6.6.0 or above Internally discovered and reported by Adham El karn of Fortinet Product Security team. FortiSIEM 6.7.5 FortiSIEM 6.7.4 FortiSIEM 6.7.3 FortiSIEM 6.7.2 FortiSIEM 6.7.1 FortiSIEM 6.7.0 CVE-2023-36551 FortiSIEM-6.7.5 FortiSIEM-6.7.4 FortiSIEM-6.7.3 FortiSIEM-6.7.2 FortiSIEM-6.7.1 FortiSIEM-6.7.0 4.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:F/RL:X/RC:X https://fortiguard.fortinet.com/psirt/FG-IR-23-126 Full path disclosure vulnerability Reference>