CVE-2024-36511

3.7LOW

An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2

Опубликовано: 9/10/2024Обновлено: 9/20/2024
Посмотреть на NVDПосмотреть на MITRE

Описание

An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions when cookie security policy is enabled may allow an attacker, under specific conditions, to retrieve the initial encrypted and signed cookie protected by the feature

ИИ-АнализНа базе ИИ

Затронутые продукты

fortinetfortiadc

Ссылки