NetSight
medium6.7

CVE-2024-33503

A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2.1 through 7.2.5, FortiManager Cloud 7.…

Impact

A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2.1 through 7.2.5, FortiManager Cloud 7.0 all versions, FortiManager 7.4.0 through 7.4.3, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6.4 all versions allows attacker to escalation of privilege via specific shell commands

Affected products

VendorProductAffected versions
FortinetFortianalyzer
from 6.4.0 before 7.2.6
from 7.4.0 before 7.4.4
FortinetFortianalyzer Cloud
from 6.4.1 before 7.2.7
from 7.4.1 before 7.4.3
FortinetFortimanager
from 6.4.0 before 7.2.6
from 7.4.0 before 7.4.4
FortinetFortimanager Cloud
from 7.0.1 before 7.2.7
from 7.4.1 before 7.4.4

Weakness classification

References