Skip to content
CVE PROGRAM SOURCE RECORD5.6 Medium

CVE-2024-46671

An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, version 7.2.10 and below, version 7.0.11 and below widgets dashbo

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, version 7.2.10 and below, version 7.0.11 and below widgets dashboard may allow an authenticated attacker with at least read-only admin permission to perform operations on the dashboard of other administrators via crafted requests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiWeb

Default version status: unaffected

  • 7.6.0 to ≤ 7.6.2affected
  • 7.4.0 to ≤ 7.4.6affected
  • 7.2.0 to ≤ 7.2.10affected
  • 7.0.0 to ≤ 7.0.11affected

References