CVE-2024-23105
EUVD-2024-2063014.05.2024, 17:15
A Use Of Less Trusted Source [CWE-348] vulnerability in Fortinet FortiPortal version 7.0.0 through 7.0.6 and version 7.2.0 through 7.2.1 allows an unauthenticated attack to bypass IP protection through crafted HTTP or HTTPS packets.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortiportal | 7.0.0 ≤ 𝑥 ≤ 7.0.6 |
| fortinet | fortiportal | 7.2.0 |
| fortinet | fortiportal | 7.2.1 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| fortinet | fortiportal | 7.0.0 ≤ 𝑥 ≤ 7.0.6 | ADP |
| fortinet | fortiportal | 7.2.0 ≤ 𝑥 ≤ 7.2.1 | ADP |
Common Weakness Enumeration