VYPR
← All advisories
Low severity3.7NVD Advisory· Published Sep 10, 2024· Updated Jun 17, 2026

CVE-2024-36511

CVE-2024-36511

Description

An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions when cookie security policy is enabled may allow an attacker, under specific conditions, to retrieve the initial encrypted and signed cookie protected by the feature

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Fortinet/Fortiadc 200d2 versions
    cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*range: >=6.0.0,<7.4.5
    • cpe:2.3:h:fortinet:fortiadc:7.4.4:*:*:*:*:*:*:*range: 7.4.0
  • Fortinet/FortiADC Web Application Firewallllm-create
    Range: 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.