FortiSIEM All Versions Auth Bypass via HTTP (CWE-863)
CVE-2024-55592 Published on March 11, 2025

An incorrect authorization vulnerability [CWE-863] in FortiSIEM 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions, 6.1 all versions, 5.4 all versions, 5.3 all versions, may allow an authenticated attacker to perform unauthorized operations on incidents via crafted HTTP requests.

NVD

Vulnerability Analysis

CVE-2024-55592 is exploitable with network access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality and integrity, and no impact on availability.

Attack Vector:

NETWORK

Attack Complexity:

LOW

Privileges Required:

HIGH

User Interaction:

NONE

Scope:

UNCHANGED

Confidentiality Impact:

LOW

Integrity Impact:

LOW

Availability Impact:

NONE

Weakness Type

What is an AuthZ Vulnerability?

The software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

CVE-2024-55592 has been classified to as an AuthZ vulnerability or weakness.

Products Associated with CVE-2024-55592

Want to know whenever a new CVE is published for Fortinet Fortisiem? stack.watch will email you.

Fortinet Fortisiem

Affected Versions

Fortinet FortiSIEM:

Version 7.2.0, <= 7.2.5 is affected.
Version 7.1.0, <= 7.1.7 is affected.
Version 7.0.0, <= 7.0.3 is affected.
Version 6.7.0, <= 6.7.9 is affected.
Version 6.6.0, <= 6.6.5 is affected.
Version 6.5.0, <= 6.5.3 is affected.
Version 6.4.0, <= 6.4.4 is affected.
Version 6.3.0, <= 6.3.3 is affected.
Version 6.2.0, <= 6.2.1 is affected.
Version 6.1.0, <= 6.1.2 is affected.
Version 5.4.0 is affected.
Version 5.3.0, <= 5.3.3 is affected.

Exploit Probability

EPSS

0.04%

Percentile

11.48%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.