Lucene search

CVE-2024-47575

🗓️ 23 Oct 2024 15:30:15Reported by [email protected]Type

A missing authentication for critical function in specific FortiManager versions allows an attacker to execute arbitrary code or commands via specially crafted requests

Reporter	Title	Published	Views	Family All 18
Tenable Nessus	Fortinet FortiManager Missing Authentication (FG-IR-24-423)	23 Oct 202400:00	–	nessus
The Hacker News	Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation	24 Oct 202406:23	–	thn
The Hacker News	THN Cybersecurity Recap: Top Threats, Tools and News (Oct 21 - Oct 27)	28 Oct 202415:44	–	thn
Wallarm Lab	How to Mitigate the Latest API Vulnerability in FortiManager	30 Oct 202413:04	–	wallarmlab
Rapid7 Blog	Fortinet FortiManager CVE-2024-47575 Exploited in Zero-Day Attacks	23 Oct 202416:21	–	rapid7blog
Rapid7 Blog	Metasploit Weekly Wrap-Up 12/06/2024	6 Dec 202420:29	–	rapid7blog
CISA KEV Catalog	Fortinet FortiManager Missing Authentication Vulnerability	23 Oct 202400:00	–	cisa_kev
GithubExploit	Exploit for Missing Authentication for Critical Function in Fortinet Fortimanager	22 Nov 202403:13	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Fortinet Fortimanager	7 Nov 202421:03	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Fortinet Fortimanager	15 Nov 202403:43	–	githubexploit

Nvd

Node

fortinet fortimanagerRange6.2.0–6.2.13

fortinet fortimanagerRange6.4.0–6.4.15

fortinet fortimanagerRange7.0.0–7.0.13

fortinet fortimanagerRange7.2.0–7.2.8

fortinet fortimanagerRange7.4.0–7.4.5

fortinet fortimanagerMatch7.6.0

fortinet fortimanager_cloudRange6.4.1–6.4.7

fortinet fortimanager_cloudRange7.0.1–7.0.13

fortinet fortimanager_cloudRange7.2.1–7.2.8

fortinet fortimanager_cloudRange7.4.1–7.4.5

Source	Link
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-24-423

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Oct 2024 15:15Current

CVSS39.8

EPSS0.886

CWE-306