8.6
High
CVE-2024-23668 An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0,…
Description
An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0, FortiWebManager 6.2.3 through 6.2.4, FortiWebManager 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiWebManager | 7.2.0 | No fix stated |
| FortiWebManager 7.0 | 7.0.0 → 7.0.4 | No fix stated |
| FortiWebManager | 6.3.0 | No fix stated |
| FortiWebManager 6.2 | 6.2.3 → 6.2.4 | No fix stated |
| FortiWebManager | 6.0.2 | No fix stated |
| fortiweb_manager | 6.0.2 | No fix stated |
Other CVEs of FortiWebManager
The 4 CVEs of FortiWebManager →
CVE-2024-23669
An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0,…
6.4
Medium
CVE-2024-23667
An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0,…
7.6
High
CVE-2024-23670
An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0,…
7.6
High