CVEvulnerability

CVE-2024-55599

5.3 MEDIUM Published 2025-07-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2025-07-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-358

Description

An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all versions, 6.4 all versions and FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions may allow a remote unauthenticated user to bypass the DNS filter via Apple devices.

Affected configurations

• fortinet fortiproxy (>= 7.0.0 < 7.4.9) • fortinet fortiproxy (>= 7.6.0 < 7.6.2) • fortinet fortisase 24.4.32 • fortinet fortios (>= 6.4.0 < 7.2.11) • fortinet fortios (>= 7.4.0 < 7.4.8) • fortinet fortios 7.6.0

Related

Weakness · CWE (1)

  • CWE-358 Improperly Implemented Security Check for Standard weakness

References