CVE-2024-27782: Critical severity Fortinet FortiAIOps vulnerability
Published Jul 9, 2024
·Updated
Multiple insufficient session expiration weaknesses [CWE-613] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an attacker to re-use stolen old session tokens to perform unauthorized operations via crafted requests.
Affected Software
1 affected component
Fortinet FortiAIOps=2.0.0
Remediation
Information
Upgrade to FortiAIOps version 2.0.1 or above
Event History
Jul 9, 2024
CVE Published
via MITRE·03:33 PM
Data Sourced
via MITRE·03:33 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-27782?
CVE-2024-27782 is considered a medium severity vulnerability due to insufficient session expiration.
2
How do I fix CVE-2024-27782?
To fix CVE-2024-27782, update FortiAIOps to a version that addresses the insufficient session expiration vulnerabilities.
3
What systems are affected by CVE-2024-27782?
CVE-2024-27782 affects FortiAIOps version 2.0.0.
4
What can an attacker do with CVE-2024-27782?
An attacker can reuse stolen old session tokens to perform unauthorized operations via crafted requests.
5
Is there a workaround for CVE-2024-27782?
Currently, a specific workaround for CVE-2024-27782 is not documented; updating the software is recommended.