critical9.8
CVE-2024-48887
A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially cr…
Impact
A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiswitch | from 6.4.0 before 6.4.15 from 7.0.0 before 7.0.11 from 7.2.0 before 7.2.9 from 7.4.0 before 7.4.5 Version 7.6.0 |