CVE-2024-52962

Summary

CVE-2024-52962 is a newly disclosed vulnerability affecting FortiAnalyzer versions 7.6.1 and below, 7.4.5 and below, 7.2.8 and below, and 7.0.13 and below, as well as FortiManager versions 7.6.1 and below, 7.4.5 and below, 7.2.8 and below, and 7.0.12 and below. This issue represents an Improper Output Neutralization for Logs vulnerability (CWE-117). It enables an unauthenticated remote attacker to manipulate logs by crafting malicious login requests. This can lead to misleading log entries, potential data leakage, or other security consequences. System administrators should update their FortiAnalyzer and FortiManager installations to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.