← Database

CVE-2024-45329

MEDIUM CVSS: 4.3 Published: 2025-06-10 Modified: 2026-06-17

Description

A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.8 may allow an authenticated attacker to view unauthorized device information via key modification in API requests.

Affected Platforms

Fortinet Fortiportal

Weakness Type

CWE-639

References