Fortinet Fortigate Authentication bypass in Node.js websocket module (FG-IR-24-535)

Version 1.2

Jan 15, 2025, 1:31 AM

Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available")
Exploit attributes ("Exploit available" set to "True")
CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C")
CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C")
CISA reference