CVE-2024-45326 — Improper Access Control in Fortinet Fortideceptor

CWE-284 — Improper Access Control4 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.3%
top 43.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Fortinet Fortideceptor
Timeline
PublishedJan 14

Description

An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all versions, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions may allow an authenticated attacker with none privileges to perform operations on the central management appliance via crafted requests.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶NVDfortinet/fortideceptor5.0.0 — 6.0.1
▶CVEListV5fortinet/fortideceptor5.3.0 — 5.3.4+4

🔴Vulnerability Details

2
CVEList
CVE-2024-45326: An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6↗2025-01-14
▶
GHSA
GHSA-3hjv-6fp6-9qj9: An Improper Access Control vulnerability [CWE-284] in FortiDeceptor version 6↗2025-01-14
▶

📋Vendor Advisories

1
Fortinet
An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3 all...↗2025-01-14
▶