CVE-2024-32124

published 2025-07-18

CVE-2024-32124: An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may allow a remote…

Priority P4 22 medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C N I L A N

An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may allow a remote authenticated read-only attacker to alter logs via a crafted HTTP request.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortiisolator	—	—
fortinet	fortiisolator	2.3.0 – 2.3.4	—
fortinet	fortiisolator	>= 2.4.3 < 2.4.5	2.4.5
fortinet	fortiisolator	2.4.3 – 2.4.4	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-284