CVEvulnerability

CVE-2024-52962

5.3 MEDIUM Published 2025-04-08 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-04-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-117

Description

An Improper Output Neutralization for Logs vulnerability [CWE-117] in FortiAnalyzer version 7.6.1 and below, version 7.4.5 and below, version 7.2.8 and below, version 7.0.13 and below and FortiManager version 7.6.1 and below, version 7.4.5 and below, version 7.2.8 and below, version 7.0.12 and below may allow an unauthenticated remote attacker to pollute the logs via crafted login requests.

Affected configurations

• fortinet fortimanager (>= 7.0.0 < 7.0.14) • fortinet fortimanager (>= 7.2.0 < 7.2.9) • fortinet fortimanager (>= 7.4.0 < 7.4.6) • fortinet fortimanager (>= 7.6.0 < 7.6.2) • fortinet fortianalyzer (>= 7.0.0 < 7.0.14) • fortinet fortianalyzer (>= 7.2.0 < 7.2.9) • fortinet fortianalyzer (>= 7.4.0 < 7.4.6) • fortinet fortianalyzer (>= 7.6.0 < 7.6.2)

Related

Weakness · CWE (1)

  • CWE-117 Improper Output Neutralization for Logs weakness

References