CVE-2024-45330

Fortinet / FortiAnalyzer PUBLISHED

Description (CNA)

A use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.2 through 7.2.5 allows attacker to escalate its privileges via specially crafted requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiAnalyzer	affected 7.4.0 through 7.4.3; affected 7.2.2 through 7.2.5

CWE

CWE-134

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-196

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.