A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.10, 7.0.0 through 7.0.17, 2.0.0 through 2.0.14, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3 allows attacker to execute unauthorized code or commands via a brute-force attack.
References
| Link | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-24-221 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
03 Feb 2025, 22:16
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortianalyzer_cloud:*:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* |
|
| First Time |
Fortinet fortiproxy
Fortinet fortianalyzer Cloud Fortinet fortios Fortinet fortimanager Cloud Fortinet fortianalyzer Fortinet Fortinet fortimanager |
|
| References | () https://fortiguard.fortinet.com/psirt/FG-IR-24-221 - Vendor Advisory | |
| Summary |
|
|
| CWE | NVD-CWE-Other |
14 Jan 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-14 14:15
Updated : 2025-02-03 22:16
NVD link : CVE-2024-48886
Mitre link : CVE-2024-48886
CVE.ORG link : CVE-2024-48886
JSON object : View
Products Affected
fortinet
- fortianalyzer
- fortimanager
- fortiproxy
- fortios
- fortimanager_cloud
- fortianalyzer_cloud
CWE