← CVE Intelligence

CVE-2024-33509

Fortinet / FortiWeb PUBLISHED

Description (CNA)

An improper certificate validation vulnerability [CWE-295] in FortiWeb 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions and 6.3 all versions may allow a remote and unauthenticated attacker in a Man-in-the-Middle position to decipher and/or tamper with the communication channel between the device and different endpoints used to fetch data for Web Application Firewall (WAF).

Affected (CNA)

Vendor / productVersions
Fortinet / FortiWebaffected 7.2.0 through 7.2.1; affected 7.0.0 through 7.0.10; affected 6.4.0 through 6.4.3; affected 6.3.0 through 6.3.23

CWE

CWE-295

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.