CVE-2024-36509
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-36509
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiWeb version 7.6.0, version 7.4.3 and below, version 7.2.10 and below, version 7.0.10 and below, version 6.3.23 and below may allow an authenticated attacker to access the encrypted passwords of other administrators via the "Log Access Event" logs page.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
将系统数据暴露到未授权控制的范围
Source: NVD (National Vulnerability Database)
Vulnerability Title
Fortinet FortiWeb 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Fortinet FortiWeb是美国飞塔（Fortinet）公司的一款Web应用层防火墙，它能够阻断如跨站点脚本、SQL注入、Cookie中毒、schema中毒等攻击的威胁，保证Web应用程序的安全性并保护敏感的数据库内容。 Fortinet FortiWeb存在安全漏洞，该漏洞源于包含一个敏感系统信息暴露于未经授权的控制范围问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-36509
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-36509
请登录查看更多情报信息。
Same Patch Batch · Fortinet · 2024-11-12 · 16 CVEs total
| CVE-2024-36513 | 7.4 HIGH | Fortinet FortiClient 安全漏洞 |
| CVE-2023-50176 | 7.1 HIGH | Fortinet FortiOS 授权问题漏洞 |
| CVE-2024-23666 | 7.1 HIGH | Fortinet FortiManager和FortiAnalyzer 安全漏洞 |
| CVE-2024-40592 | 6.8 MEDIUM | Fortinet FortiClient 数据伪造问题漏洞 |
| CVE-2024-36507 | 6.7 MEDIUM | Fortinet FortiClientWindows 安全漏洞 |
| CVE-2024-31496 | 6.3 MEDIUM | Fortinet FortiManager和FortiAnalyzer 安全漏洞 |
| CVE-2024-32118 | 6.3 MEDIUM | Fortinet FortiManager和FortiAnalyzer 操作系统命令注入漏洞 |
| CVE-2024-33505 | 5.3 MEDIUM | Fortinet FortiManager和FortiAnalyzer 安全漏洞 |
| CVE-2024-26011 | 5.2 MEDIUM | Fortinet多款产品 安全漏洞 |
| CVE-2023-47543 | 5.1 MEDIUM | Fortinet FortiPortal 安全漏洞 |
| CVE-2024-32116 | 4.8 MEDIUM | Fortinet FortiManager和FortiAnalyzer 安全漏洞 |
| CVE-2024-32117 | 4.7 MEDIUM | Fortinet FortiManager和FortiAnalyzer 路径遍历漏洞 |
| CVE-2023-44255 | 3.9 LOW | Fortinet FortiManager 安全漏洞 |
| CVE-2024-33510 | 3.6 LOW | Fortinet FortiOS和FortiProxy 安全特征问题漏洞 |
| CVE-2024-35274 | 2.2 LOW | Fortinet FortiManager和FortiAnalyzer 安全漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-497
- CVE-2026-7864
Exposure of Sensitive Information to an Unauthorized Actor - CVE-2026-41928
Vvveb < 1.0.8.2 Information Disclosure via Cron Controller - CVE-2026-25468
WordPress Happy Addons for Elementor plugin <= 3.20.8 - Sens - CVE-2026-42644
WordPress BetterDocs plugin <= 4.3.10 - Sensitive Data Expos - CVE-2026-24222
NVIDIA NeMoClaw 安全漏洞
V. Comments for CVE-2024-36509
No comments yet