CVE-2024-48887 — Fortinet / FortiSwitch

CVE-2024-48887

Fortinet / FortiSwitch PUBLISHED

Description (CNA)

A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiSwitch	affected 7.6.0; affected 7.4.0 through 7.4.4; affected 7.2.0 through 7.2.8; affected 7.0.0 through 7.0.10; affected 6.4.0 through 6.4.14

CWE

CWE-620

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-435

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.