Vulnerability in Fortinet Fortiadc
CVE-2024-36511
An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions when cookie security policy is enabled may allow an attacker, under specific conditions, to retrieve the initial encrypted and signed cookie protected by the feature
EPSS: 0.004 (30.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.7 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Fortinet Fortiadc — versions 7.4.0, 7.2.0, 7.1.0
Weakness classification (CWE)
References
- psirt@fortinet.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2024-36511?
- CVE-2024-36511 is a low-severity vulnerability in Fortinet Fortiadc, classified under CWE-358. CVSS score: 3.7/10. Published 2024-09-10.
- How severe is CVE-2024-36511?
- Low severity. CVSS v3 base score is 3.7 out of 10.