CVEvulnerability
CVE-2024-32119
4.8 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-06-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
- Weaknesses
- CWE-1390
Description
An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacker with the knowledge of the targeted user's FCTUID and VDOM to perform operations such as uploading or tagging on behalf of the targeted user via specially crafted TCP requests.
Affected configurations
• fortinet forticlientems (>= 6.2.0 <= 6.2.9)
• fortinet forticlientems (>= 6.4.0 <= 6.4.9)
• fortinet forticlientems (>= 7.0.0 <= 7.0.13)
• fortinet forticlientems (>= 7.2.0 < 7.2.5)
• fortinet forticlientems 7.4.0
Related
Weakness · CWE (1)
- CWE-1390 Weak Authentication weakness
References
- https://fortiguard.fortinet.com/psirt/FG-IR-23-375 Vendor Advisory