← CVE Intelligence

CVE-2024-23665

Fortinet / FortiWeb PUBLISHED

Description (CNA)

Multiple improper authorization vulnerabilities [CWE-285] in FortiWeb version 7.4.2 and below, version 7.2.7 and below, version 7.0.10 and below, version 6.4.3 and below, version 6.3.23 and below may allow an authenticated attacker to perform unauthorized ADOM operations via crafted requests.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiWebaffected 7.4.0 through 7.4.2; affected 7.2.0 through 7.2.7; affected 7.0.0 through 7.0.10; affected 6.4.0 through 6.4.3; affected 6.3.0 through 6.3.23

CWE

CWE-285

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.