Lucene search

FortinetCVE-2024-27784

HistoryJul 09, 2024 - 4:15 p.m.

CVE-2024-27784

2024-07-0916:15:05

CWE-532

fortinet

web.nvd.nist.gov

vulnerability

sensitive information

unauthorized actor

api endpoint

log files

fortiaiops

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C

AI Score

Confidence

Low

EPSS

0.001

Percentile

18.8%

JSON

Multiple Exposure of sensitive information to an unauthorized actor vulnerabilities [CWE-200] in FortiAIOps version 2.0.0 may allow an authenticated, remote attacker to retrieve sensitive information from the API endpoint or log files.

Affected configurations

Nvd

Node

fortinetfortiaiopsMatch2.0.0

VendorProductVersionCPE
fortinetfortiaiops2.0.0cpe:2.3:a:fortinet:fortiaiops:2.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fortinet	fortiaiops	2.0.0	cpe:2.3:a:fortinet:fortiaiops:2.0.0:::::::*

CNA Affected

[
  {
    "vendor": "Fortinet",
    "product": "FortiAIOps",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "2.0.0",
        "status": "affected"
      }
    ]
  }
]

References

fortiguard.fortinet.com/psirt/FG-IR-24-072

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C

AI Score

Confidence

Low

EPSS

0.001

Percentile

18.8%

JSON

Related for CVE-2024-27784