ID
VAR-202409-0961
CVE
CVE-2024-36511
TITLE
fortinet's FortiADC Vulnerability in
Trust: 0.8
DESCRIPTION
An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions when cookie security policy is enabled may allow an attacker, under specific conditions, to retrieve the initial encrypted and signed cookie protected by the feature. fortinet's FortiADC Exists in unspecified vulnerabilities.Information may be obtained. Fortinet FortiADC is an application delivery controller of Fortinet. Fortinet FortiADC has a security feature vulnerability, which is caused by improper implementation of security checks
Trust: 2.16
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | fortinet | model: | fortiadc | scope: | gte | version: | 6.0.0 | Trust: 1.0 |
| vendor: | fortinet | model: | fortiadc | scope: | lt | version: | 7.4.5 | Trust: 1.0 |
| vendor: | フォーティネット | model: | fortiadc | scope: | eq | version: | 6.0.0 that's all 7.4.5 | Trust: 0.8 |
| vendor: | フォーティネット | model: | fortiadc | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | fortinet | model: | fortiadc | scope: | eq | version: | 6.0.x | Trust: 0.6 |
| vendor: | fortinet | model: | fortiadc | scope: | eq | version: | 7.1.x | Trust: 0.6 |
| vendor: | fortinet | model: | fortiadc | scope: | eq | version: | 7.0.x | Trust: 0.6 |
| vendor: | fortinet | model: | fortiadc | scope: | eq | version: | 6.2.x | Trust: 0.6 |
| vendor: | fortinet | model: | fortiadc | scope: | eq | version: | 6.1.x | Trust: 0.6 |
| vendor: | fortinet | model: | fortiadc | scope: | eq | version: | 7.2.x | Trust: 0.6 |
| vendor: | fortinet | model: | fortiadc | scope: | gte | version: | 7.4.0,<=7.4.4 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-358 | Trust: 1.0 |
| problemtype: | NVD-CWE-noinfo | Trust: 1.0 |
| problemtype: | Improperly implemented security checks (CWE-358) [ others ] | Trust: 0.8 |
| problemtype: | Lack of information (CWE-noinfo) [NVD evaluation ] | Trust: 0.8 |
PATCH
| title: | FG-IR-22-256 | url: | https://fortiguard.fortinet.com/psirt/FG-IR-22-256 | Trust: 0.8 |
| title: | Patch for Fortinet FortiADC security feature issue vulnerability | url: | https://www.cnvd.org.cn/patchInfo/show/590411 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2024-36511 | Trust: 3.2 |
| db: | JVNDB | id: | JVNDB-2024-008703 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2024-39381 | Trust: 0.6 |
REFERENCES
| url: | https://fortiguard.fortinet.com/psirt/fg-ir-22-256 | Trust: 1.6 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2024-36511 | Trust: 0.8 |
SOURCES
| db: | CNVD | id: | CNVD-2024-39381 |
| db: | JVNDB | id: | JVNDB-2024-008703 |
| db: | NVD | id: | CVE-2024-36511 |
LAST UPDATE DATE
2024-09-30T23:22:20.045000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2024-39381 | date: | 2024-09-27T00:00:00 |
| db: | JVNDB | id: | JVNDB-2024-008703 | date: | 2024-09-24T02:33:00 |
| db: | NVD | id: | CVE-2024-36511 | date: | 2024-09-20T19:43:25.023 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2024-39381 | date: | 2024-09-13T00:00:00 |
| db: | JVNDB | id: | JVNDB-2024-008703 | date: | 2024-09-24T00:00:00 |
| db: | NVD | id: | CVE-2024-36511 | date: | 2024-09-10T15:15:16.610 |