CVEvulnerability
CVE-2024-55592
3.8 LOW
Official page ↗
- Status
- Analyzed
- Published
- 2025-03-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.8 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
- Weaknesses
- CWE-863
Description
An incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions, may allow an authenticated attacker to perform unauthorized operations on incidents via crafted HTTP requests.
Affected configurations
• fortinet fortisiem (>= 5.3.0 <= 7.2.5)
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://fortiguard.fortinet.com/psirt/FG-IR-24-377 Vendor Advisory