PT-2024-9821 · Fortinet · Fortiedr Manager Api

Published 2024-09-10 · Updated 2024-09-20 · CVE-2024-45323

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: FortiEDR Manager API versions 6.0 through 6.2.2

Description: The issue is related to improper access control, allowing an authenticated admin with REST API permissions, restricted to a specific organization, to access backend logs that include information related to other organizations in a shared environment context. This may enable a remote attacker to gain access to confidential information.

Recommendations: For FortiEDR Manager API versions 6.0 through 6.2.2, consider restricting access to the backend logs to prevent unauthorized access to confidential information until a patch is available. As a temporary workaround, consider disabling the REST API permissions for admins restricted to a specific organization to minimize the risk of exploitation.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2024-11597

CVE-2024-45323

Affected Products

Fortiedr Manager Api

References · 8

• https://bdu.fstec.ru/vul/2024-11597 · Security Note
• https://fortiguard.fortinet.com/psirt/FG-IR-24-371 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-45323 · Security Note
• https://osv.dev/vulnerability/CVE-2024-45323 · Vendor Advisory
• https://t.me/cvedetector/5239 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1833553460798562509 · Twitter Post
• https://twitter.com/CVEnew/status/1833549084084605195 · Twitter Post
• https://vuldb.com/?id.276980 · Note