This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 11.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, iOS 18.1 and iPadOS 18.1. An app may be able to access sensitive user data.

The version of Apple iOS running on the mobile device is prior to 18.1. It is, therefore, affected by multiple vulnerabilities.

The remote host is running a version of FortiManager that is 6.2.x, 6.4.x 7.0.x, 7.2.x through 7.2.4, or 7.4.x through 7.4.1. It is, therefore, affected by an authorization bypass vulnerability through user-controlled key [CWE-639] vulnerability that  may allow a remote attacker with low privileges to read sensitive data via a crafted HTTP request.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
209855	Apple iOS < 18.1 Multiple Vulnerabilities (121563)	Nessus	Mobile Devices	critical
207342	Fortinet FortiManager Authorization Bypass (FG-IR-23-204)	Nessus	Firewalls	medium

Detections

Analytics

CVE-2024-44254

medium

Tenable Plugins

critical

medium