CVE-2024-33503 in FortiManager

Sumário

de MITRE • 14/01/2025

A improper privilege management in Fortinet FortiManager version 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to escalation of privilege via specific shell commands

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsável: Fortinet
• Reservar: 23/04/2024
• Divulgação: 14/01/2025
• Moderação: aceite
• Entrada: VDB-291539
• CPE: pronto
• CWE: CWE-266 (confirmado)
• CVSS: 7.8 (NVD)
• EPSS: 0.00211
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-33503
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-33503
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-33503/