VYPR
← All advisories
High severity7.5NVD Advisory· Published May 14, 2024· Updated Jun 17, 2026

CVE-2024-23105

CVE-2024-23105

Description

A Use Of Less Trusted Source [CWE-348] vulnerability in Fortinet FortiPortal version 7.0.0 through 7.0.6 and version 7.2.0 through 7.2.1 allows an unauthenticated attack to bypass IP protection through crafted HTTP or HTTPS packets.

Affected products

5
  • Fortinet/Fortiportal5 versions
    cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*range: >=7.0.0,<=7.0.6
    • cpe:2.3:a:fortinet:fortiportal:7.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiportal:7.2.1:*:*:*:*:*:*:*
    • (no CPE)range: 7.0.0-7.0.6, 7.2.0-7.2.1
    • (no CPE)range: 7.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.