CVE-2024-45330

A use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.2 through 7.2.5 allows attacker to escalate its privileges via specially crafted requests.

Score

CVSS 3.1 7.2 High

Status

Analyzed - psirt@fortinet.com

Published

2024-10-08

Last modified

2024-10-08

Weaknesses

CWE-134

Affected products

• Fortianalyzer (Fortinet)
• Fortianalyzer Cloud (Fortinet)

References

• https://fortiguard.fortinet.com/psirt/FG-IR-24-196