CVE-2024-54020: Unauthorized modification of global threat feeds
A missing authorization [CWE-862] vulnerability in FortiManager may allow an authenticated attacker to overwrite global threat feeds via crafted update requests.
Other sources
A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may allow an authenticated attacker to overwrite global threat feeds via crafted update requests.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-54020?
CVE-2024-54020 is considered to be a critical vulnerability due to the potential for authenticated attackers to overwrite global threat feeds.
How do I fix CVE-2024-54020?
To remediate CVE-2024-54020, update FortiManager to version 7.2.2 or later, or 7.0.8 or later depending on your current version.
What versions of FortiManager are affected by CVE-2024-54020?
CVE-2024-54020 affects FortiManager versions 7.2.0 to 7.2.1 and 7.0.0 to 7.0.7.
What type of vulnerability is CVE-2024-54020?
CVE-2024-54020 is a missing authorization vulnerability, classified under CWE-862.
Who can exploit CVE-2024-54020?
Authenticated attackers can exploit CVE-2024-54020 by sending crafted update requests to overwrite global threat feeds.