← CVE Intelligence

CVE-2024-33505

Fortinet / FortiAnalyzer PUBLISHED

Description (CNA)

A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to escalation of privilege via specially crafted http requests

Affected (CNA)

Vendor / productVersions
Fortinet / FortiAnalyzeraffected 7.4.0 through 7.4.2; affected 7.2.0 through 7.2.5; affected 7.0.0 through 7.0.13; affected 6.4.0 through 6.4.15
Fortinet / FortiManageraffected 7.4.0 through 7.4.2; affected 7.2.0 through 7.2.5; affected 7.0.0 through 7.0.13; affected 6.4.0 through 6.4.15; affected 6.2.0 through 6.2.13; affected 6.0.0 through 6.0.12

CWE

CWE-122

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.