Fortinet FortiIsolator 2.3.4
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortiisolator:2.3.4:*:*:*:*:*:*:*
part: a version: 2.3.4 update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortiisolator (f6c6a8ea-a5ed-533f-b2ef-7c034a3a7a2a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-33507 |
vulnerable | 2026-06-08 06:37:31.420005 |
Details available
HIGH (7)
An insufficient session expiration vulnerability [CWE-613] and an incorrect authorization vulnerability [CWE-863] in FortiIsolator 2.4.0 through 2.4.4, 2.3 all versions, 2.2.0, 2.1 all versions, 2.0 all versions authentication mechanism may allow remote unauthenticated attacker to deauthenticate logged in admins via crafted cookie and remote authenticated read-only attacker to gain write privilege via crafted cookie.
Published: 2025-10-14T15:23:42.194Z
Updated: 2026-01-14T09:16:06.909Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32124 |
vulnerable | 2026-06-08 06:35:32.926548 |
Details available
MEDIUM (4)
An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may allow a remote authenticated read-only attacker to alter logs via a crafted HTTP request.
Published: 2025-07-18T08:08:21.544Z
Updated: 2025-07-18T13:45:22.747Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27779 |
vulnerable | 2026-06-08 06:31:29.210407 |
Details available
MEDIUM (6.3)
An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version 4.2.6 and below, 4.0 all versions, 3.2 all versions and FortiIsolator version 2.4 and below, 2.3 all versions, 2.2 all versions, 2.1 all versions, 2.0 all versions, 1.2 all versions may allow a remote attacker in possession of an admin session cookie to keep using that admin's session even after the admin user was deleted.
Published: 2025-07-18T07:58:23.943Z
Updated: 2026-02-26T17:50:28.774Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.