Skip to content
fr Sign in
7.0 High

CVE-2024-33507 An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization vulnerability [CWE-863] in…

Description

An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization vulnerability [CWE-863] in FortiIsolator 2.4.0 through 2.4.4, 2.3 all versions, 2.2.0, 2.1 all versions, 2.0 all versions authentication mechanism may allow remote unauthenticated attacker to deauthenticate logged in admins via crafted cookie and remote authenticated read-only attacker to gain write privilege via crafted cookie.

Affected products and versions

Product Affected versions Fixed in
FortiIsolator 2.4 2.4.0 → 2.4.4 No fix stated
FortiIsolator 2.3 2.3.0 → 2.3.4 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiIsolator

The 7 CVEs of FortiIsolator →
CVE-2024-32124 An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions… 4.0 Medium CVE-2024-27779 An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version… 6.3 Medium CVE-2024-54024 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]… 7.0 High CVE-2024-54025 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]… 6.5 Medium
Track this CVE