CVE-2024-45329

—

CVSS 3.1

4.3 medium

EPSS

<1%p22

Published

Jun 10, 2025 (Jun 10, 2025)

Modified

Jun 17, 2026

Description

A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.8 may allow an authenticated attacker to view unauthorized device information via key modification in API requests.

Vendors: fortinet
Products: fortiportal
Weakness: CWE-639
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.