VULNERABILITY INTELLIGENCE

CVE-2024-36505

CVSS score5.1 MEDIUM
EPSS probability0.16%
CISA KEVNot currently listed
Published2024-08-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker who has already successfully obtained write access to the underlying system (via another hypothetical exploit) to bypass the file integrity checking system.

Weakness classification

  • psirt@fortinet.com: CWE-284
  • nvd@nist.gov: NVD-CWE-Other

Primary references