PT-2025-6264 · Fortinet · Fortianalyzer

Published 2025-02-11 · Updated 2025-02-13 · CVE-2024-52966

Positive Technologies (AI Summary)

CVSS v3.1

2.3

Low

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Fortinet FortiAnalyzer versions 6.4.0 through 7.6.0

Description: The issue allows an unauthorized actor to cause information disclosure via filter manipulation, potentially leading to the exposure of sensitive information. This is related to insufficient protection of service data in the Log View component of FortiAnalyzer, which could enable an attacker to read event logs from another domain.

Recommendations: For Fortinet FortiAnalyzer versions 6.4.0 through 7.6.0, consider restricting access to the Log View component as a temporary workaround until a patch is available. Additionally, review filter configurations to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-01605

CVE-2024-52966

Affected Products

Fortianalyzer

References · 9

• https://bdu.fstec.ru/vul/2025-01605 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-52966 · Security Note
• https://fortiguard.fortinet.com/psirt/FG-IR-24-422 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-52966 · Vendor Advisory
• https://reddit.com/r/k12cybersecurity/comments/1inr1ei/msisac_cybersecurity_advisory_multiple · Reddit Post
• https://twitter.com/CVEnew/status/1889355110913884550 · Twitter Post
• https://t.me/cvedetector/17725 · Telegram Post
• https://reddit.com/r/k12cybersecurity/comments/1ioj9rb/updated_msisac_cybersecurity_advisory_multiple · Reddit Post
• https://vuldb.com/de/?id.295280 · Note