An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, and FortiSOAR 7.5.0, 7.4.0 through 7.4.4, 7.3.0 through 7.3.2, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an unauthenticated attacker to enumerate valid users via observing login request responses.
References
| Link | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-24-071 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
31 Jan 2025, 16:30
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| First Time |
Fortinet forticlientems
Fortinet fortisoar Fortinet |
|
| CWE | CWE-203 | |
| References | () https://fortiguard.fortinet.com/psirt/FG-IR-24-071 - Vendor Advisory | |
| CPE | cpe:2.3:a:fortinet:forticlientems:7.4.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortisoar:7.5.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:*:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortisoar:*:*:*:*:*:*:*:* |
14 Jan 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-14 14:15
Updated : 2025-01-31 16:30
NVD link : CVE-2024-36510
Mitre link : CVE-2024-36510
JSON object : View
Products Affected
fortinet
- forticlientems
- fortisoar
CWE
CWE-203
Observable Discrepancy