3.9
Faible
CVE-2024-45329 A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5,…
Description
A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.8 may allow an authenticated attacker to view unauthorized device information via key modification in API requests.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiPortal | 7.4.0 | Pas de correctif indiqué |
| FortiPortal 7.2 | 7.2.0 → 7.2.5 | Pas de correctif indiqué |
| FortiPortal 7.0 | 7.0.0 → 7.0.8 | Pas de correctif indiqué |
Références
- fortiguard.fortinet.com fortiguard.fortinet.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de FortiPortal
Les 25 CVE de FortiPortal →
CVE-2026-49938
A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8,…
6.2
Moyenne
CVE-2024-40593
A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through…
5.9
Moyenne
CVE-2025-54838
An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated…
6.4
Moyenne
CVE-2025-46777
A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5,…
2.2
Faible