CVE-2024-36510

5.3MEDIUM

An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, and FortiSOAR 7.5.0, 7.4.0 through 7.4.4, 7.3.0 through 7.3.2, 7.2 all versio

Опубликовано: 1/14/2025Обновлено: 1/31/2025
Посмотреть на NVDПосмотреть на MITRE

Описание

An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, and FortiSOAR 7.5.0, 7.4.0 through 7.4.4, 7.3.0 through 7.3.2, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an unauthenticated attacker to enumerate valid users via observing login request responses.

ИИ-АнализНа базе ИИ

Затронутые продукты

fortinetforticlientems
fortinetforticlientems
7.4.0
fortinetfortisoar
fortinetfortisoar
fortinetfortisoar
7.5.0

Ссылки