CVE-2024-23667

An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0, FortiWebManager 6.2.3 through 6.2.4, FortiWebManager 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI...

CVE-2024-23667

Fortinet FortiWebManager is affected by CVE-2024-23667 due to improper authorization that allows an attacker to execute unauthorized code or commands via HTTP requests or CLI. Affected FortiWebManager versions include 6.0.2; 6.2.3–6.2.4; 6.3.0; 7.0.0–7.0.4; and 7.2.0. CVSS metrics indicate high i...