medium5.6
CVE-2024-33505
A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManag…
Impact
A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to escalation of privilege via specially crafted http requests
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortianalyzer | from 6.4.0 before 7.2.6 from 7.4.0 before 7.4.3 |
| Fortinet | Fortimanager | from 6.0.0 before 7.2.7 from 7.4.0 before 7.4.3 |
| Fortinet | Fortimanager Cloud | from 6.4.1 before 7.2.7 from 7.4.1 before 7.4.3 |