Description
Multiple insufficient session expiration weaknesses [CWE-613] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an attacker to re-use stolen old session tokens to perform unauthorized operations via crafted requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiAIOps | 2.0.0 | — |
Advisories 1
- NCSC-2024-0287 Kwetsbaarheden verholpen in Fortinet NCSC-NL (Netherlands) · Jul 10, 2024