NetSight
high7.3

CVE-2024-50563

A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 throu…

Impact

A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to execute unauthorized code or commands via a brute-force attack.

Affected products

VendorProductAffected versions
FortinetFortianalyzer
from 7.4.1 before 7.4.4
from 7.6.0 before 7.6.2
FortinetFortianalyzer Cloud
from 7.4.1 before 7.4.4
FortinetFortimanager
from 7.4.1 before 7.4.4
from 7.6.0 before 7.6.2
FortinetFortimanager Cloud
from 7.4.1 before 7.4.4

Weakness classification

References