CVE-2024-35273 in FortiAnalyzer

Sumário

de MITRE • 14/01/2025

A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http requests.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsável: Fortinet
• Reservar: 14/05/2024
• Divulgação: 14/01/2025
• Moderação: aceite
• Entrada: VDB-291542
• CPE: pronto
• CWE: CWE-787 (confirmado)
• CVSS: 8.8 (NVD)
• EPSS: 0.00639
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-35273
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-35273
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-35273/