← Back

CVE-2024-45330

nvd nist
Published: Oct 8, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.2
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: NVD

Description

A use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.2 through 7.2.5 allows attacker to escalate its privileges via specially crafted requests.

Affected (4)

Fortinet
2 products
Fortianalyzer
Fortianalyzer Cloud
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
Fortianalyzer
From 7.2.2 to 7.2.5
Fortianalyzer
From 7.4.0 to 7.4.3
Fortinet
Fortianalyzer Cloud
From 7.2.2 to 7.2.6
Fortianalyzer Cloud
From 7.4.1 to 7.4.3

Related CWEs

CWE-134
Use of Externally-Controlled Format String
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

References (1)

Source: psirt@fortinet.com
Vendor Advisory

Timeline

No history available yet.