CVE-2024-45323

4.3MEDIUM

An improper access control vulnerability [CWE-284] in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permissi

게시됨: 9/10/2024업데이트됨: 9/20/2024
NVD에서 보기MITRE에서 보기

설명

An improper access control vulnerability [CWE-284] in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permissions in his profile and restricted to a specific organization to access backend logs that include information related to other organizations.

AI 분석AI 기반

영향받는 제품

fortinetfortiedrmanager
fortinetfortiedrmanager
6.0.1

참조