Improper authentication in FortiManager - CVE-2024-26011

Vulnerability identifier: #VU100401

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-26011

CWE-ID: CWE-287

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to improper authentication within the fgfmd daemon. A remote non-authenticated attacker can inject packets in tunnels established between a FortiManager and the targeted device.

Note, the packets can be only injected, but not read.

FortiManager
FortiPortal
FortiProxy
FortiPAM
FortiOS
FortiSwitch Manager

Install updates from vendor's website.

FortiManager - addressed in versions 6.4.15, 7.0.12, 7.2.5, 7.4.3
FortiProxy - addressed in versions 7.2.10, 7.4.4
FortiPAM - update to 1.3.0
FortiPortal - update to 6.0.15
FortiOS - addressed in versions 7.0.15, 7.2.8, 7.4.4
FortiSwitch Manager - addressed in versions 7.0.4, 7.2.4

• https://www.fortiguard.com/psirt/FG-IR-24-032

• Improper authentication in FortiManager fgfmd
• Improper authentication in FortiOS fgfmd
• Improper authentication in FortiPAM fgfmd
• Improper authentication in FortiPortal fgfmd
• Improper authentication in FortiProxy fgfmd
• Improper authentication in FortiSwitch Manager fgfmd