CVE-2024-55592
published 2025-03-11CVE-2024-55592: An incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5…
low3.8CVSS 3.1
AVNACLPRHUINSUCLILAN
An incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions, may allow an authenticated attacker to perform unauthorized operations on incidents via crafted HTTP requests.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | fortisiem | — | — |
| fortinet | fortisiem | — | — |
| fortinet | fortisiem | 5.3.0 – 7.2.5 | — |
| fortinet | fortisiem | 6.1.0 – 6.1.2 | — |
| fortinet | fortisiem | 6.2.0 – 6.2.1 | — |
| fortinet | fortisiem | 6.3.0 – 6.3.3 | — |
| fortinet | fortisiem | 6.4.0 – 6.4.4 | — |
| fortinet | fortisiem | 6.5.0 – 6.5.3 | — |
| fortinet | fortisiem | 6.6.0 – 6.6.5 | — |
| fortinet | fortisiem | 6.7.0 – 6.7.9 | — |
| fortinet | fortisiem | 7.0.0 – 7.0.3 | — |
| fortinet | fortisiem | 7.1.0 – 7.1.7 | — |
| fortinet | fortisiem | 7.2.0 – 7.2.5 | — |