CVE-2024-55592

Description

An incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions, may allow an authenticated attacker to perform unauthorized operations on incidents via crafted HTTP requests.

Reserved 2024-12-09 | Published 2025-03-11 | Updated 2025-03-11 | Assigner fortinet

Problem types

Improper access control

Product status

Default status
unaffected

7.2.0
affected

7.1.0
affected

7.0.0
affected

6.7.0
affected

6.6.0
affected

6.5.0
affected

6.4.0
affected

6.3.0
affected

6.2.0
affected

6.1.0
affected

5.4.0
affected

5.3.0
affected

References

fortiguard.fortinet.com/psirt/FG-IR-24-377

cve.org (CVE-2024-55592)

nvd.nist.gov (CVE-2024-55592)

Download JSON