ID
VAR-202604-4209
CVE
CVE-2024-23104
TITLE
fortinet's FortiNDR Information leakage vulnerabilities in multiple products, including
Trust: 0.8
DESCRIPTION
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiVoice 7.0.0 through 7.0.1 may allow a remote authenticated attacker with at least read-only permission on system maintenance to access backup information via crafted HTTP requests. During system maintenance, a remotely authenticated attacker with at least read-only privileges could potentially access it. HTTP It may be possible to access backup information via a request.There is a possibility that some of the information handled by the software may be leaked to the outside. However, the information handled by the software will not be rewritten. Furthermore, the software will not stop. Furthermore, attacks that exploit this vulnerability will not affect other software
Trust: 1.62
AFFECTED PRODUCTS
| vendor: | fortinet | model: | fortindr | scope: | eq | version: | 7.6.0 | Trust: 1.0 |
| vendor: | fortinet | model: | fortindr | scope: | gte | version: | 7.0.0 | Trust: 1.0 |
| vendor: | fortinet | model: | fortivoice | scope: | gte | version: | 7.0.0 | Trust: 1.0 |
| vendor: | fortinet | model: | fortivoice | scope: | lt | version: | 7.0.2 | Trust: 1.0 |
| vendor: | fortinet | model: | fortindr | scope: | lt | version: | 7.4.9 | Trust: 1.0 |
| vendor: | フォーティネット | model: | fortivoice | scope: | - | version: | - | Trust: 0.8 |
| vendor: | フォーティネット | model: | fortindr | scope: | - | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-200 | Trust: 1.0 |
| problemtype: | information leak (CWE-200) [ others ] | Trust: 0.8 |
PATCH
| title: | PSIRT | FortiGuard Labs | url: | https://fortiguard.fortinet.com/psirt/FG-IR-26-124 | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2024-23104 | Trust: 2.6 |
| db: | JVNDB | id: | JVNDB-2026-011848 | Trust: 0.8 |
REFERENCES
| url: | https://fortiguard.fortinet.com/psirt/fg-ir-26-124 | Trust: 1.0 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2024-23104 | Trust: 0.8 |
SOURCES
| db: | JVNDB | id: | JVNDB-2026-011848 |
| db: | NVD | id: | CVE-2024-23104 |
LAST UPDATE DATE
2026-06-19T23:10:43.635000+00:00
SOURCES UPDATE DATE
| db: | JVNDB | id: | JVNDB-2026-011848 | date: | 2026-04-21T01:40:00 |
| db: | NVD | id: | CVE-2024-23104 | date: | 2026-04-20T18:03:06.263 |
SOURCES RELEASE DATE
| db: | JVNDB | id: | JVNDB-2026-011848 | date: | 2026-04-21T00:00:00 |
| db: | NVD | id: | CVE-2024-23104 | date: | 2026-04-14T16:16:28.723 |