Skip to content
OpenAdvisories
Medium · 4.0 CVE-2024-32124 EUVD-2024-29945GHSA-q3ww-hc8h-pvwj

An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may al…

Published Jul 18, 2025 · Updated Jul 18, 2025 · Assigned by fortinet

Vendor: Fortinet Product: FortiIsolator Category: Network devices

Description

An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may allow a remote authenticated read-only attacker to alter logs via a crafted HTTP request.

Affected products

VendorProductAffectedFixed
Fortinet FortiIsolator 2.4.3 – ≤ 2.4.4, 2.3.0 – ≤ 2.3.4 —

References