| |
Vulnerability CVE-2024-45323
Published: 2024-09-10
| Description: |
An improper access control vulnerability [CWE-284] in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permissions in his profile and restricted to a specific organization to access backend logs that include information related to other organizations. |
Type:
CWE-284 (Improper Access Control)
References: |
https://fortiguard.fortinet.com/psirt/FG-IR-24-371
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
