Main
Vulnerability Database
Exploits
ID:11146 - Exploit for Client-Side Enforcement of Server-Side Security in FortiAnalyzer and FortiAnalyzer-BigData - CVE-2024-23666
ID:11146 - Exploit for Client-Side Enforcement of Server-Side Security in FortiAnalyzer and FortiAnalyzer-BigData - CVE-2024-23666
Published: February 21, 2025
Vulnerability identifier: #VU100782
Vulnerability risk: Medium
CVE-ID: CVE-2024-23666
CWE-ID: CWE-602
Exploitation vector: Remote access
Vulnerable software:
FortiAnalyzer
FortiAnalyzer-BigData
FortiAnalyzer
FortiAnalyzer-BigData
Link to public exploit:
Vulnerability description
The vulnerability allows a remote user to perform otherwise restricted actions.
The vulnerability exists due to improper permissions management. A remote user with at least read-only permission to execute sensitive operations via crafted requests.
Remediation
Install updates from vendor's website.