← CVE Intelligence

CVE-2024-45329

Fortinet / FortiPortal PUBLISHED

Description (CNA)

A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.8 may allow an authenticated attacker to view unauthorized device information via key modification in API requests.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiPortalaffected 7.4.0; affected 7.2.0 through 7.2.5; affected 7.0.0 through 7.0.8

CWE

CWE-639

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.