Home

Description

A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may allow an authenticated attacker to overwrite global threat feeds via crafted update requests.

PUBLISHED Reserved 2024-11-27 | Published 2025-05-28 | Updated 2025-05-28 | Assigner fortinet




LOW: 2.1CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C

Problem types

Improper access control

Product status

Default status
unaffected

7.2.0 (semver)
affected

7.0.0 (semver)
affected

References

fortiguard.fortinet.com/psirt/FG-IR-24-023

cve.org (CVE-2024-54020)

nvd.nist.gov (CVE-2024-54020)

Download JSON