CVE-2024-21759CWE-639

An authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and versions 7.0.0 through 7.0.6 allows attacker to view…

Low · published July 9, 2024

CVSS v3.1
3.9
EPSS
0%
Percentile
20.8
In the wild
Unconfirmed
What it is

An authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and versions 7.0.0 through 7.0.6 allows attacker to view unauthorized resources via HTTP or HTTPS requests.

The record
Technical detail
CVSS v3.1
3.9 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00294 · 20.8th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2024-07-09T15:33Z
EPSS history
Timeline
  • 09 JUL 15:33Z
    An authorization bypass through user-controlled key in Fortinet FortiPortal version 7.2.0, and versions 7.0.0 through 7.0.6 allows attacker to view…
    cvelistv5