CyberSec.Space Logo
CVEブラウザに戻る

CVE-2024-32119

MEDIUM
4.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-06-10
Last Modified2026-06-17
Data SourcesNVD

Vulnerability Description

An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacker with the knowledge of the targeted user's FCTUID and VDOM to perform operations such as uploading or tagging on behalf of the targeted user via specially crafted TCP requests.

Affected Platforms (CPE)

📦
Fortinet

Forticlientems

>= 6.2.0 and <= 6.2.9>= 6.4.0 and <= 6.4.9>= 7.0.0 and <= 7.0.13>= 7.2.0 and < 7.2.5= 7.4.0

References & Advisories

🔗 https://fortiguard.fortinet.com/psirt/FG-IR-23-375

関連する脆弱性情報

CVE-2026-598367.5

A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1...

CVE-2026-356169.8

A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to ex...

CVE-2023-487864.3

A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before 7.2.6 may ...

CVE-2025-228595.3

A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 through 7.4....