An improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6.3.0 and 6.2.3 through 6.2.4 and 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI.
References
| Link | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-23-222 | Vendor Advisory |
| https://fortiguard.fortinet.com/psirt/FG-IR-23-222 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Dec 2024, 16:38
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| References | () https://fortiguard.fortinet.com/psirt/FG-IR-23-222 - Vendor Advisory | |
| CPE | cpe:2.3:a:fortinet:fortiwebmanager:6.0.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiwebmanager:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiwebmanager:*:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiwebmanager:6.3.0:*:*:*:*:*:*:* |
|
| First Time |
Fortinet fortiwebmanager
Fortinet |
03 Jun 2024, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-03 10:15
Updated : 2024-12-17 16:38
NVD link : CVE-2024-23667
Mitre link : CVE-2024-23667
JSON object : View
Products Affected
fortinet
- fortiwebmanager
CWE