NetSight
high7.2

CVE-2024-45330

A use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.2 through 7.2.5 allows attacker to escalate its privil…

Impact

A use of externally-controlled format string in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.2 through 7.2.5 allows attacker to escalate its privileges via specially crafted requests.

Affected products

VendorProductAffected versions
FortinetFortianalyzer
from 7.2.2 through 7.2.5
from 7.4.0 through 7.4.3
FortinetFortianalyzer Cloud
from 7.2.2 through 7.2.6
from 7.4.1 through 7.4.3

Weakness classification

References