CVE-2024-36511
Low
Description
An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions when cookie security policy is enabled may allow an attacker, under specific conditions, to retrieve the initial encrypted and signed cookie protected by the feature
SeverityLow
CVSS3.7
Exploit probability—
Product
Fortinet Fortiadc
PublishedSep 10, 2024
First seenSep 10, 2024
Weakness typeCWE-358CWE-358
How to fix
Update
- fortinet fortiadc7.4.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fortinet fortiadc | 6.0.0 ≤ v < 7.4.5 | 7.4.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.