CVE-2024-21757

No fix known EPSS <1%CVSS 5.5

A unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.4.0 through 7.4.1, as well as Fortinet FortiAnalyzer versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.4.0 through 7.4.1, allows an attacker to modify admin passwords via the device configuration backup.

Published 2024-08-13 · CVE record · OSV

Products: Fortinet FortiManager, Fortinet FortiAnalyzer