CVE-2024-33503

A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2.1 through 7.2.5, FortiManager Cloud 7.0 all versions, FortiManager 7.4.0 through 7.4.3, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6.4 all versions allows attacker to escalation of privilege via specific shell commands

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@fortinet.com

Published

2025-01-14

Last modified

2026-07-08

Weaknesses

CWE-266

Affected products

• Fortianalyzer (Fortinet)
• Fortianalyzer Cloud (Fortinet)
• Fortimanager (Fortinet)
• Fortimanager Cloud (Fortinet)
• Fortimanagercloud (Fortinet)

References

• https://fortiguard.fortinet.com/psirt/FG-IR-24-127