CVE-2024-45326

MEDIUM 4.3CVE-2024-45326 · Published 14/01/2025 · updated 17/06/2026

In short

CVE-2024-45326 is a MEDIUM (CVSS 4.3) vulnerability affecting fortideceptor (fortinet).
Chance of exploitation in the next 30 days (EPSS): 0.26%, higher than 18.1% of all vulnerabilities.
Fix: update to 6.0.1 or later.

Package	Affected versions	Patched versions
fortideceptor fortinet	`≥ 5.0.0, < 6.0.1`	`6.0.1`

Description

An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3 all versions, FortiDeceptor 5.2 all versions, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions may allow an authenticated attacker with none privileges to perform operations on the central management appliance via crafted requests.

References

fortiguard.fortinet.com/psirt/FG-IR-24-285 · Vendor Advisory

More vulnerabilities in fortideceptor

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

fortideceptor

fortinet

≥ 5.0.0, < 6.0.1

6.0.1

Description

More vulnerabilities in fortideceptor

See all →