CVE-2024-23670 | Fortinet FortiWebManager up to 6.0.2/6.2.4/6.3.0/7.0.4/7.2.0 HTTP Request improper authorization (FG-IR-23-222)

A vulnerability, which was classified as critical, was found in Fortinet FortiWebManager up to 6.0.2/6.2.4/6.3.0/7.0.4/7.2.0. This affects an unknown part of the component HTTP Request Handler. The manipulation leads to improper authorization.

This vulnerability is uniquely identified as CVE-2024-23670. It is possible to launch the attack on the local host. There is no exploit available.

It is recommended to upgrade the affected component.