← Database

CVE-2024-54020

LOW CVSS: 2.3 Published: 2025-05-28 Modified: 2026-06-17

Description

A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may allow an authenticated attacker to overwrite global threat feeds via crafted update requests.

Affected Platforms

Fortinet Fortimanager

Weakness Type

CWE-862

References