VDB
CISA-2024-54020
CISA-2024-54020
PUBLISHED
CVSS 2.1 LOW
Reported by fortinet · Published May 28, 2025
A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may allow an authenticated attacker to overwrite global threat feeds via crafted update requests.
Risk Scores
CVSS 3.1
2.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiManager | 7.2.0, 7.0.0 |
| Fortinet | FortiManager | 7.2.0, 7.0.0, 7.2.0 |
Timeline
- May 28, 2025 CVE Published
- May 28, 2025 CVE Updated