Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-23663

An improper access control in Fortinet FortiExtender 4.1.1 - 4.1.9, 4.2.0 - 4.2.6, 5.3.2, 7.0.0 - 7.0.4, 7.2.0 - 7.2.4 and 7.4.0 - 7.4.2 allows an attacker to create users with elevated privileges via a crafted HTTP request.

Published

2024-07-09T16:15:04.593

Last Modified

2024-11-21T08:58:07.203

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-284
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System fortinet fortiextender_firmware ≤ 4.1.9 Yes
Operating System fortinet fortiextender_firmware ≤ 4.2.6 Yes
Operating System fortinet fortiextender_firmware ≤ 7.0.4 Yes
Operating System fortinet fortiextender_firmware ≤ 7.2.4 Yes
Operating System fortinet fortiextender_firmware ≤ 7.4.2 Yes
Operating System fortinet fortiextender_firmware 5.3.2 Yes
Hardware fortinet fortiextender - No
References