CVE-2024-23669

CVE-2024-23669 affects Fortinet FortiWebManager; improper authorization could allow an attacker to execute unauthorized code or commands via HTTP requests or CLI. Affected versions include FortiWebManager 7.2.0, 7.0.0–7.0.4, 6.3.0, 6.2.3–6.2.4, and 6.0.2. CVSS details in the NVD indicate high imp...

CVE-2024-23670

CVE-2024-23670 describes an improper authorization in Fortinet FortiWebManager affecting multiple versions (6.0.2; 6.2.3–6.2.4; 6.3.0; 7.0.0–7.0.4; 7.2.0). The underlying issue is an authorization weakness that allows an attacker to execute unauthorized code or commands via HTTP requests or the C...

CVE-2024-23667

Fortinet FortiWebManager is affected by CVE-2024-23667 due to improper authorization that allows an attacker to execute unauthorized code or commands via HTTP requests or CLI. Affected FortiWebManager versions include 6.0.2; 6.2.3–6.2.4; 6.3.0; 7.0.0–7.0.4; and 7.2.0. CVSS metrics indicate high i...

CVE-2024-23668

Fortinet FortiWebManager is affected by CVE-2024-23668 due to improper authorization in the HTTP Request Handler. Affected versions: 6.0.2; 6.2.3–6.2.4; 6.3.0; 7.0.0–7.0.4; 7.2.0. Exploitation via HTTP requests or CLI could allow executing unauthorized code or commands. Remediation: upgrade to th...