Vulnerability in Fortinet Fortideceptor

CVE-2024-45326

An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all versions, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions may allow an a…

EPSS: 0.003 (49.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.9 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2024-45326?
CVE-2024-45326 is a low-severity vulnerability in Fortinet Fortideceptor, classified under Improper Access Control. CVSS score: 3.9/10. Published 2025-01-14.
How severe is CVE-2024-45326?
Low severity. CVSS v3 base score is 3.9 out of 10.
Is CVE-2024-45326 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.