Lucene search

K
nvd[email protected]NVD:CVE-2024-36505
HistoryAug 13, 2024 - 4:15 p.m.

CVE-2024-36505

2024-08-1316:15:08
CWE-284
web.nvd.nist.gov
18
improper access control
fortios
bypassing file integrity

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0

Percentile

9.5%

An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker who has already successfully obtained write access to the underlying system (via another hypothetical exploit) to bypass the file integrity checking system.

Affected configurations

Nvd
Node
fortinetfortiosRange6.4.136.4.15
OR
fortinetfortiosRange7.0.127.0.15
OR
fortinetfortiosRange7.2.57.2.8
OR
fortinetfortiosRange7.4.07.4.4
VendorProductVersionCPE
fortinetfortios*cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0

Percentile

9.5%

Related for NVD:CVE-2024-36505