CVE-2024-23668

An improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6.3.0 and 6.2.3 through 6.2.4 and 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI...

CVE-2024-23668

Fortinet FortiWebManager is affected by CVE-2024-23668 due to improper authorization in the HTTP Request Handler. Affected versions: 6.0.2; 6.2.3–6.2.4; 6.3.0; 7.0.0–7.0.4; 7.2.0. Exploitation via HTTP requests or CLI could allow executing unauthorized code or commands. Remediation: upgrade to th...

CVE-2024-23668

An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0, FortiWebManager 6.2.3 through 6.2.4, FortiWebManager 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI...