CVE-2024-45326

4.3MEDIUM

An Improper Access Control vulnerability [CWE-284] in FortiDeceptor version 6.0.0, version 5.3.3 and below, version 5.2.1 and below, version 5.1.0, version 5.0.0 may allow an authenticated attacker wi

Published: 1/14/2025Updated: 1/31/2025
View on NVDView on MITRE

Description

An Improper Access Control vulnerability [CWE-284] in FortiDeceptor version 6.0.0, version 5.3.3 and below, version 5.2.1 and below, version 5.1.0, version 5.0.0 may allow an authenticated attacker with none privileges to perform operations on the central management appliance via crafted requests.

AI AnalysisPowered by AI

Affected Products

fortinetfortideceptor

References