VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 10, 2024· Updated Sep 10, 2024

CVE-2024-36511

CVE-2024-36511

Description

An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions when cookie security policy is enabled may allow an attacker, under specific conditions, to retrieve the initial encrypted and signed cookie protected by the feature

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Fortinet/Fortiadc 200dcpe-rescue2 versions
    cpe:2.3:h:fortinet:fortiadc:7.4.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:fortinet:fortiadc:7.4.4:*:*:*:*:*:*:*range: 7.4.0
    • (no CPE)range: >=6.0, <=7.4.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.