CVE-2024-36510

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Jan 14, 2025
CWE ID 204

Summary

CVE-2024-36510 is a vulnerability affecting FortiClientEMS versions 7.4.0, 7.2.0 through 7.2.4, and all versions prior to 7.0, as well as FortiSOAR versions 7.5.0, 7.4.0 through 7.4.4, 7.3.0 through 7.3.2, and all versions prior to 7.2 and 7.0. This issue is classified as an observable response discrepancy vulnerability (CWE-204). Unauthenticated attackers can exploit this vulnerability by observing login request responses, enabling them to enumerate valid users.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share