CVE-2024-45326
An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all versions, FortiDeceptor 5.1 all versions, FortiD
Severity
Low 3.9
CVSS 3.1
Exploited
Not listed
EPSS
0.003
16.5th percentile
Discovered by
Not disclosed
Published
Jan 14, 2025
Assigned by fortinet
Description
An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all versions, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions may allow an authenticated attacker with none privileges to perform operations on the central management appliance via crafted requests.
Weakness: CWE-284
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Fortinet | FortiDeceptor | Threat Detection & Sandbox | cna-assigner |
Vendor-reported affected versions (1)
- Fortinet · FortiDeceptor
Vendor remediation
Upgrade to FortiDeceptor version 6.1.0 or above Upgrade to FortiDeceptor version 6.0.1 or above