CVE-2024-36511CWE-358
An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions…
Low · published September 10, 2024
What it is
An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions when cookie security policy is enabled may allow an attacker, under specific conditions, to retrieve the initial encrypted and signed cookie protected by the feature
The record
Technical detail
- CVSS v3.1
- 3.4 · LOW
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:U/RC:R
- CVSS v4.0
- Not supplied
- EPSS
- 0.00379 · 30.6th percentile
- Weakness
- CWE-358 · Improperly Implemented Security Check for Standard
- Published
- 2024-09-10T14:37Z
EPSS history
Timeline