6.4
Medium
CVE-2024-23669 An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0,…
Description
An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0, FortiWebManager 6.2.3 through 6.2.4, FortiWebManager 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiWebManager | 7.2.0 | No fix stated |
| FortiWebManager 7.0 | 7.0.0 → 7.0.4 | No fix stated |
| FortiWebManager | 6.3.0 | No fix stated |
| FortiWebManager 6.2 | 6.2.3 → 6.2.4 | No fix stated |
| FortiWebManager | 6.0.2 | No fix stated |
| fortiweb_manager | 7.2.0 | No fix stated |
| fortiweb_manager 7.0 | 7.0.0 → 7.0.4 | No fix stated |
| fortiweb_manager | 6.3.0 | No fix stated |
| fortiweb_manager 6.2 | 6.2.3 → 6.2.4 | No fix stated |
Show the other branch Hide the other branch
| Product | Affected versions | Fixed in |
|---|---|---|
| fortiweb_manager | 6.0.2 | No fix stated |
Other CVEs of FortiWebManager
The 4 CVEs of FortiWebManager →
CVE-2024-23667
An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0,…
7.6
High
CVE-2024-23668
An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0,…
8.6
High
CVE-2024-23670
An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0,…
7.6
High