CVE-2024-27782 - Vulnerability Details - OpenCVE

Multiple insufficient session expiration vulnerabilities [CWE-613] in FortiAIOps version 2.0.0 may allow an attacker to re-use stolen old session tokens to perform unauthorized operations via crafted requests.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00545.

Key SSVC decision points have not yet been added.

Vendors	Products
Fortinet	Fortiaiops

Configuration 1 [-]

cpe:2.3:a:fortinet:fortiaiops:2.0.0:*:*:*:*:*:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2024-24975	Multiple insufficient session expiration vulnerabilities [CWE-613] in FortiAIOps version 2.0.0 may allow an attacker to re-use stolen old session tokens to perform unauthorized operations via crafted requests.

Fixes

Solution

Please upgrade to FortiAIOps version 2.0.1 or above

Workaround

No workaround given by the vendor.

References

Link	Providers
https://fortiguard.fortinet.com/psirt/FG-IR-24-069

History

Fri, 16 Aug 2024 15:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Fortinet Fortinet fortiaiops
CPEs		cpe:2.3:a:fortinet:fortiaiops:2.0.0:::::::*
Vendors & Products		Fortinet Fortinet fortiaiops

MITRE

Status: PUBLISHED

Assigner: fortinet

Published: 2024-07-09T15:33:30.678Z

Updated: 2024-08-02T00:41:54.447Z

Reserved: 2024-02-26T14:46:31.335Z

Link: CVE-2024-27782

Vulnrichment

Updated: 2024-08-02T00:41:54.447Z

NVD

Status : Modified

Published: 2024-07-09T16:15:05.017

Modified: 2024-11-21T09:05:02.573

Link: CVE-2024-27782

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-27782", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "state": "PUBLISHED", "assignerShortName": "fortinet", "dateReserved": "2024-02-26T14:46:31.335Z", "datePublished": "2024-07-09T15:33:30.678Z", "dateUpdated": "2024-08-02T00:41:54.447Z"}, "containers": {"cna": {"affected": [{"vendor": "Fortinet", "product": "FortiAIOps", "defaultStatus": "unaffected", "versions": [{"version": "2.0.0", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "Multiple insufficient session expiration vulnerabilities [CWE-613] in FortiAIOps version 2.0.0 may allow an attacker to re-use stolen old session tokens to perform unauthorized operations via crafted requests."}], "providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2024-07-09T15:33:30.678Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-613", "description": "Improper access control", "type": "CWE"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C"}}], "solutions": [{"lang": "en", "value": "Please upgrade to FortiAIOps version 2.0.1 or above \n"}], "references": [{"name": "https://fortiguard.fortinet.com/psirt/FG-IR-24-069", "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-069"}]}, "adp": [{"affected": [{"vendor": "fortinet", "product": "fortiaiops", "cpes": ["cpe:2.3:a:fortinet:fortiaiops:2.0.0:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "2.0.0", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-07-09T16:54:40.346669Z", "id": "CVE-2024-27782", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-09T16:57:20.062Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:41:54.447Z"}, "title": "CVE Program Container", "references": [{"name": "https://fortiguard.fortinet.com/psirt/FG-IR-24-069", "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-069", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-069", "name": "https://fortiguard.fortinet.com/psirt/FG-IR-24-069", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:41:54.447Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-27782", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-07-09T16:54:40.346669Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:fortinet:fortiaiops:2.0.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortiaiops", "versions": [{"status": "affected", "version": "2.0.0"}], "defaultStatus": "unaffected"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-09T16:57:15.418Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Fortinet", "product": "FortiAIOps", "versions": [{"status": "affected", "version": "2.0.0"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Please upgrade to FortiAIOps version 2.0.1 or above \n"}], "references": [{"url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-069", "name": "https://fortiguard.fortinet.com/psirt/FG-IR-24-069"}], "descriptions": [{"lang": "en", "value": "Multiple insufficient session expiration vulnerabilities [CWE-613] in FortiAIOps version 2.0.0 may allow an attacker to re-use stolen old session tokens to perform unauthorized operations via crafted requests."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-613", "description": "Improper access control"}]}], "providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2024-07-09T15:33:30.678Z"}}}, "cveMetadata": {"cveId": "CVE-2024-27782", "state": "PUBLISHED", "dateUpdated": "2024-08-02T00:41:54.447Z", "dateReserved": "2024-02-26T14:46:31.335Z", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "datePublished": "2024-07-09T15:33:30.678Z", "assignerShortName": "fortinet"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortiaiops:2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "46735B4F-511E-4C02-A561-FCF029146F79", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Multiple insufficient session expiration vulnerabilities [CWE-613] in FortiAIOps version 2.0.0 may allow an attacker to re-use stolen old session tokens to perform unauthorized operations via crafted requests."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de caducidad de sesi\u00f3n insuficiente [CWE-613] en FortiAIOps versi\u00f3n 2.0.0 pueden permitir a un atacante reutilizar tokens de sesi\u00f3n antiguos robados para realizar operaciones no autorizadas a trav\u00e9s de solicitudes manipuladas."}], "id": "CVE-2024-27782", "lastModified": "2024-11-21T09:05:02.573", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.9, "source": "psirt@fortinet.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-07-09T16:15:05.017", "references": [{"source": "psirt@fortinet.com", "tags": ["Vendor Advisory"], "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-069"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-069"}], "sourceIdentifier": "psirt@fortinet.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-613"}], "source": "psirt@fortinet.com", "type": "Secondary"}]}