CVE-2024-23666

Summary

CVE-2024-23666 is a client-side vulnerability affecting Fortinet FortiAnalyzer-BigData versions 7.4.0 and below, FortiManager versions 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4, FortiAnalyzer versions 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4, and FortiManager versions 6.4.5 through 6.4.14 and 6.2.5. The issue lies in the lack of proper enforcement of server-side security controls, enabling attackers to gain unauthorized access through crafted requests. Fortinet FortiAnalyzer, FortiManager, and FortiAnalyzer users are urged to apply the relevant patches to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.