CVE-2021-32600: 
FortiOS vulnerability analysis and mitigation

An exposure of sensitive information vulnerability (CVE-2021-32600) was identified in FortiOS CLI affecting versions 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.x, and 5.6.x. The vulnerability was published on September 7, 2021, and received a CVSSv3 score of 4.9, indicating medium severity (Fortiguard Advisory, NVD).

The vulnerability exists in the FortiOS Command Line Interface (CLI) and allows a local authenticated user assigned to a specific Virtual Domain (VDOM) to retrieve information from other VDOMs, including sensitive data such as the admin account list and network interface list (Fortiguard Advisory).

If exploited, this vulnerability enables unauthorized access to sensitive information from other VDOMs, potentially exposing administrative account details and network configuration information. This could lead to further security compromises if the exposed information is misused (Fortiguard Advisory).

Fortinet has addressed this vulnerability in FortiOS versions 7.0.1, 6.4.7, 6.2.10, and newer releases. Users are advised to upgrade to these or later versions to mitigate the risk (Fortiguard Advisory).