← CVE Intelligence

CVE-2024-23670

Fortinet / FortiWebManager PUBLISHED

Description (CNA)

An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0, FortiWebManager 6.2.3 through 6.2.4, FortiWebManager 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiWebManageraffected 7.2.0; affected 7.0.0 through 7.0.4; affected 6.3.0; affected 6.2.3 through 6.2.4; affected 6.0.2

CWE

CWE-285

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.