Fortinet FortiManager: Unspecified Security Vulnerability (CVE-2024-45331)

Fortinet FortiManager: Unspecified Security Vulnerability (CVE-2024-45331)

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

01/16/2025

Created

02/11/2025

Added

02/06/2025

Modified

02/06/2025

Description

A incorrect privilege assignment in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15, FortiManager versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15, FortiAnalyzer Cloud versions 7.4.1 through 7.4.2, 7.2.1 through 7.2.6, 7.0.1 through 7.0.13, 6.4.1 through 6.4.7 allows attacker to escalate privilege via specific shell commands

Solution(s)

• fortinet-fortimanager-upgrade-7_2_6
• fortinet-fortimanager-upgrade-7_4_4

References

• https://attackerkb.com/topics/cve-2024-45331
• CVE - 2024-45331
• https://fortiguard.fortinet.com/psirt/FG-IR-24-127