CVE-2024-23105

Published: May 14, 2024Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.6 / Impact: 5.9

Source: NVD

Description

A Use Of Less Trusted Source [CWE-348] vulnerability in Fortinet FortiPortal version 7.0.0 through 7.0.6 and version 7.2.0 through 7.2.1 allows an unauthenticated attack to bypass IP protection through crafted HTTP or HTTPS packets.

Affected (3)

Products: Fortinet: Fortiportal

Fortinet

1 product

Fortiportal

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortiportal	From 7.0.0 to 7.0.6
Fortinet Fortiportal	Version 7.2.0
Fortinet Fortiportal	Version 7.2.1

Related CWEs

CWE-348

Use of Less Trusted Source

The product has two different sources of the same data or information, but it uses the source that has less support for verification, is less trusted, or is less resistant to attack.

References (2)

https://fortiguard.com/psirt/FG-IR-24-021

Source: psirt@fortinet.com

Vendor Advisory

https://fortiguard.com/psirt/FG-IR-24-021

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.