CVE-2024-23665 in FortiWeb

Riassunto

di MITRE • 03/06/2024

Multiple improper authorization vulnerabilities [CWE-285] in FortiWeb version 7.4.2 and below, version 7.2.7 and below, version 7.0.10 and below, version 6.4.3 and below, version 6.3.23 and below may allow an authenticated attacker to perform unauthorized ADOM operations via crafted requests.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 19/01/2024
• Divulgazione: 03/06/2024
• Moderazione: accettato
• Voce: VDB-266885
• CPE: pronto
• CWE: CWE-285 (confermato)
• CVSS: 8.8 (NVD)
• EPSS: 0.00488
• KEV: no
• Attività: molto basso
• Settore: Telecommunication, Transportation, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-23665
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-23665
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-23665/