← CVE Intelligence

CVE-2024-21757

Fortinet / FortiManager PUBLISHED

Description (CNA)

A unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.4.0 through 7.4.1, as well as Fortinet FortiAnalyzer versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.4.0 through 7.4.1, allows an attacker to modify admin passwords via the device configuration backup.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiManageraffected 7.4.0 through 7.4.1; affected 7.2.0 through 7.2.4; affected 7.0.0 through 7.0.10
Fortinet / FortiAnalyzeraffected 7.4.0 through 7.4.1; affected 7.2.0 through 7.2.4; affected 7.0.0 through 7.0.10

CWE

CWE-620

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.