CVE-2024-23663 | Fortinet FortiExtender up to 7.0.4/7.2.4/7.4.2 HTTP access control (FG-IR-23-459)

A vulnerability was found in Fortinet FortiExtender up to 7.0.4/7.2.4/7.4.2. It has been classified as critical. This affects an unknown part of the component HTTP Handler. The manipulation leads to improper access controls.

This vulnerability is uniquely identified as CVE-2024-23663. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.