CVE-2024-36505CWE-284
An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker…
Medium · published August 13, 2024
What it is
An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker who has already successfully obtained write access to the underlying system (via another hypothetical exploit) to bypass the file integrity checking system.
The record
Technical detail
- CVSS v3.1
- 4.7 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:X/RC:R
- CVSS v4.0
- Not supplied
- EPSS
- 0.00159 · 4.6th percentile
- Weakness
- CWE-284 · Improper Access Control
- Published
- 2024-08-13T15:51Z
EPSS history
Timeline