CVEvulnerability

CVE-2024-36510

5.3 MEDIUM Published 2025-01-14 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-01-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-203, CWE-204

Description

An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, and FortiSOAR 7.5.0, 7.4.0 through 7.4.4, 7.3.0 through 7.3.2, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an unauthenticated attacker to enumerate valid users via observing login request responses.

Affected configurations

• fortinet forticlientems (>= 7.0.0 < 7.2.5) • fortinet forticlientems 7.4.0 • fortinet fortisoar (>= 6.4.0 < 7.3.3) • fortinet fortisoar (>= 7.4.0 < 7.4.5) • fortinet fortisoar 7.5.0

Related

Weakness · CWE (2)

  • CWE-203 Observable Discrepancy weakness
  • CWE-204 Observable Response Discrepancy weakness

References