CyberCVE

CVE-2024-45326

An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all versions, FortiDeceptor 5.1 all versions, FortiD

Severity
Low 3.9
CVSS 3.1
Exploited
Not listed
EPSS
0.003
17.6th percentile
Discovered by
Third party
Vendor advisory field
Published
Jan 14, 2025
Assigned by fortinet

Description

An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all versions, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions may allow an authenticated attacker with none privileges to perform operations on the central management appliance via crafted requests.

Weakness: CWE-284

Affected products

Vendor Product Category Matched by
Fortinet FortiDeceptor Threat Detection & Sandbox cna-assigner
Vendor-reported products (1)
  • Fortinet · FortiDeceptor

Credit

Fortinet is pleased to thank Mister Thomas SAUTIER for reporting this vulnerability under responsible disclosure.

Vendor remediation

Upgrade to FortiDeceptor version 6.1.0 or above Upgrade to FortiDeceptor version 6.0.1 or above

References

Something wrong here?