CVEvulnerability
CVE-2024-45329
4.3 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-06-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-639
Description
A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.8 may allow an authenticated attacker to view unauthorized device information via key modification in API requests.
Affected configurations
• fortinet fortiportal (>= 7.0.0 < 7.0.9)
• fortinet fortiportal (>= 7.2.0 < 7.2.6)
• fortinet fortiportal 7.4.0
Related
Weakness · CWE (1)
- CWE-639 Authorization Bypass Through User-Controlled Key weakness
References
- https://fortiguard.fortinet.com/psirt/FG-IR-24-274 Vendor Advisory