CVE-2024-47571Operation on a Resource after Expiration or Release in Fortinet Fortimanager

Severity
9.8CRITICALNVD
CNA8.1
EPSS
1.7%
top 17.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 14

Description

An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper access to FortiGate via valid credentials.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

NVDfortinet/fortimanager7.0.77.0.9+3
CVEListV5fortinet/fortimanager7.0.77.0.8+3

🔴Vulnerability Details

2
CVEList
CVE-2024-47571: An operation on a resource after expiration or release in Fortinet FortiManager 62025-01-14
GHSA
GHSA-44m6-q7g6-5vp6: An operation on a resource after expiration or release in Fortinet FortiManager 62025-01-14

📋Vendor Advisories

1
Fortinet
Admin Account Persistence after Deletion2025-01-14
CVE-2024-47571 — Fortinet Fortimanager vulnerability | cvebase