CVE-2024-47571: Admin Account Persistence after Deletion
An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper access to FortiGate via valid credentials.
Other sources
An operation on a resource after expiration or release vulnerability [CWE-672] in FortiManager may allow a Fortigate admin account that is deleted through FortiManager to still be able to login to the FortiGate via valid credentials.
— FortiGuard
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47571?
CVE-2024-47571 is classified as a medium-severity vulnerability that allows improper access to FortiGate via valid credentials.
How do I fix CVE-2024-47571?
To fix CVE-2024-47571, upgrade FortiManager to version 7.4.1 or later, 7.2.4 or later, 6.4.13 or later, or ensure you are on version 7.0.9 in the defined safe range.
Which versions of FortiManager are affected by CVE-2024-47571?
Affected versions of FortiManager range from 6.4.12 through 7.4.0.
What type of vulnerability is CVE-2024-47571?
CVE-2024-47571 is an operation on a resource after expiration or release vulnerability, categorized under CWE-672.
Can exploiting CVE-2024-47571 allow unauthorized access?
Yes, exploiting CVE-2024-47571 can grant an attacker improper access to FortiGate resources using valid credentials.