Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-45329

A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.8 may allow an authenticated attacker to view unauthorized device information via key modification in API requests.

Published

2025-06-10T17:19:25.083

Last Modified

2025-07-22T21:24:55.703

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-639
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application fortinet fortiportal < 7.0.9 Yes
Application fortinet fortiportal < 7.2.6 Yes
Application fortinet fortiportal 7.4.0 Yes
References