VULNERABILITY INTELLIGENCE

CVE-2024-33503

CVSS score6.7 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2025-01-14
Last modified2026-07-08
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2.1 through 7.2.5, FortiManager Cloud 7.0 all versions, FortiManager 7.4.0 through 7.4.3, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6.4 all versions allows attacker to escalation of privilege via specific shell commands

Weakness classification

  • CWE-266: Incorrect Privilege Assignment

Primary references