CVE-2024-23670

An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0, FortiWebManager 6.2.3 through 6.2.4, FortiWebManager 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI...

CVE-2024-23670

CVE-2024-23670 describes an improper authorization in Fortinet FortiWebManager affecting multiple versions (6.0.2; 6.2.3–6.2.4; 6.3.0; 7.0.0–7.0.4; 7.2.0). The underlying issue is an authorization weakness that allows an attacker to execute unauthorized code or commands via HTTP requests or the C...