Lucene search
PRIOn knowledge basePRION:CVE-2024-23112HistoryMar 12, 2024 - 3:15 p.m.
Authorization
2024-03-1215:15:00
PRIOn knowledge base
www.prio-n.com
7
authorization bypass; user-controlled key vulnerability; fortios; fortiproxy; versions 6.4.7 to 7.4.1; ssl-vpn; url manipulation
An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiOS version 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.1 through 7.0.13, 6.4.7 through 6.4.14, and FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 SSL-VPN may allow an authenticated attacker to gain access to another user’s bookmark via URL manipulation.
References
Related
nessus
nessus
Fortinet Fortigate (FG-IR-24-013)
2024-03-12 00:00:00
cvelist
cvelist
CVE-2024-23112
2024-03-12 15:09:17
nvd
nvd
CVE-2024-23112
2024-03-12 15:15:49
cve
cve
CVE-2024-23112
2024-03-12 15:15:49