Multiple improper authorization vulnerabilities [CWE-285] in FortiWeb version 7.4.2 and below, version 7.2.7 and below, version 7.0.10 and below, version 6.4.3 and below, version 6.3.23 and below may allow an authenticated attacker to perform unauthorized ADOM operations via crafted requests.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://fortiguard.fortinet.com/psirt/FG-IR-23-474 |
History
Tue, 17 Dec 2024 17:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Fortinet
Fortinet fortiweb |
|
Weaknesses | NVD-CWE-noinfo | |
CPEs | cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:* | |
Vendors & Products |
Fortinet
Fortinet fortiweb |
MITRE
Status: PUBLISHED
Assigner: fortinet
Published: 2024-06-03T09:50:33.614Z
Updated: 2024-08-01T23:06:25.362Z
Reserved: 2024-01-19T08:23:28.612Z
Link: CVE-2024-23665
Vulnrichment
Updated: 2024-08-01T23:06:25.362Z
NVD
Status : Analyzed
Published: 2024-06-03T10:15:12.870
Modified: 2024-12-17T16:43:37.527
Link: CVE-2024-23665
Redhat
No data.