CVE-2024-36511 - FortiADC Cookie Security Policy Validation Bypass Remote Authentication Bypass

2 months ago 24
ARTICLE AD BOX
CVE ID : CVE-2024-36511
Published : Sept. 10, 2024, 3:15 p.m. | 24 minutes ago
Description : An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions when cookie security policy is enabled may allow an attacker, under specific conditions, to retrieve the initial encrypted and signed cookie protected by the feature
Severity: 3.7 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Read Entire Article