An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker who has already successfully obtained write access to the underlying system (via another hypothetical exploit) to bypass the file integrity checking system.
References
| Link | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-24-012 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
22 Aug 2024, 14:36
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Fortinet
Fortinet fortios |
|
| CWE | NVD-CWE-Other | |
| References | () https://fortiguard.fortinet.com/psirt/FG-IR-24-012 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CPE | cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* |
13 Aug 2024, 17:11
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-13 16:15
Updated : 2024-08-22 14:36
NVD link : CVE-2024-36505
Mitre link : CVE-2024-36505
JSON object : View
Products Affected
fortinet
- fortios
CWE