CVE-2024-45326: An Improper Access Control vulnerability [CWE-284] in FortiDeceptor version 6.0.0, version 5.3.3 and below, version 5.2.1 and below, version...
3.9
CVSS
Description
An Improper Access Control vulnerability [CWE-284] in FortiDeceptor version 6.0.0, version 5.3.3 and below, version 5.2.1 and below, version 5.1.0, version 5.0.0 may allow an authenticated attacker with none privileges to perform operations on the central management appliance via crafted requests.
Classification
CVE ID: CVE-2024-45326
CVSS Base Severity: LOW
CVSS Base Score: 3.9
Affected Products
Vendor: Fortinet
Product: FortiDeceptor
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 16.23% (scored less or equal to compared to others)
EPSS Date: 2025-02-12 (when was this score calculated)