FG-IR-24-377: Incorrect authorization in incident page
Published Mar 11, 2025
·Updated
An incorrect authorization vulnerability [CWE-863] in FortiSIEM may allow an authenticated attacker to perform unauthorized operations on incidents via crafted HTTP requests.
Affected Software
12 affected components
Fortinet FortiSIEM>=7.2
Fortinet FortiSIEM>=7.1
Fortinet FortiSIEM>=7.0
Fortinet FortiSIEM>=6.7
Fortinet FortiSIEM>=6.6
Fortinet FortiSIEM>=6.5
Fortinet FortiSIEM>=6.4
Fortinet FortiSIEM>=6.3
Fortinet FortiSIEM>=6.2
Fortinet FortiSIEM>=6.1
Fortinet FortiSIEM>=5.4
Fortinet FortiSIEM>=5.3
Event History
Mar 11, 2025
Advisory Published
via FortiGuard·12:00 AM
Data Sourced
via FortiGuard·12:00 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of FG-IR-24-377?
FG-IR-24-377 is categorized as an incorrect authorization vulnerability that may allow unauthorized operations.
2
How do I fix FG-IR-24-377?
To fix FG-IR-24-377, update FortiSIEM to the latest version that addresses this vulnerability.
3
What versions of FortiSIEM are affected by FG-IR-24-377?
FG-IR-24-377 affects FortiSIEM versions 5.3 through 7.2.
4
Can FG-IR-24-377 be exploited remotely by an attacker?
Yes, FG-IR-24-377 can potentially be exploited by an authenticated attacker via crafted HTTP requests.
5
What type of attacks does FG-IR-24-377 facilitate?
FG-IR-24-377 facilitates unauthorized operations on incidents within FortiSIEM.