描述
Multiple insufficient session expiration weaknesses [CWE-613] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an attacker to re-use stolen old session tokens to perform unauthorized operations via crafted requests.
AI分析AI驱动
受影响产品
fortinetfortiaiops
2.0.0
参考资料
- https://fortiguard.fortinet.com/psirt/FG-IR-24-069Vendor Advisory
- https://fortiguard.fortinet.com/psirt/FG-IR-24-069Vendor Advisory