CVE-2024-31488 - Vulnerability Details - OpenCVE

An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and reflected cross site scripting (XSS) attack via crafted HTTP requests.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00476.

Exploitation None

Automatable No

Technical Impact Total

Vendors	Products
Fortinet	Fortinac

Configuration 1 [-]

OR	cpe:2.3:a:fortinet:fortinac::::::::
	cpe:2.3:a:fortinet:fortinac::::::::

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2024-29368	An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and reflected cross site scripting (XSS) attack via crafted HTTP requests.

Fixes

Solution

Please upgrade to FortiNAC version 9.4.5 or above Please upgrade to FortiNAC version 7.4.0 or above Please upgrade to FortiNAC version 7.2.4 or above

Workaround

No workaround given by the vendor.

References

Link	Providers
https://fortiguard.com/psirt/FG-IR-24-040

History

Tue, 21 Jan 2025 22:15:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:fortinet:fortinac::::::::

MITRE

Status: PUBLISHED

Assigner: fortinet

Published: 2024-05-14T16:19:08.151Z

Updated: 2024-08-02T01:52:57.296Z

Reserved: 2024-04-04T12:52:41.585Z

Link: CVE-2024-31488

Vulnrichment

Updated: 2024-05-17T12:21:19.444Z

NVD

Status : Analyzed

Published: 2024-05-14T17:17:23.733

Modified: 2025-01-21T21:47:47.183

Link: CVE-2024-31488

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-31488", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "state": "PUBLISHED", "assignerShortName": "fortinet", "dateReserved": "2024-04-04T12:52:41.585Z", "datePublished": "2024-05-14T16:19:08.151Z", "dateUpdated": "2024-08-02T01:52:57.296Z"}, "containers": {"cna": {"affected": [{"vendor": "Fortinet", "product": "FortiNAC", "defaultStatus": "unaffected", "versions": [{"versionType": "semver", "version": "9.4.0", "lessThanOrEqual": "9.4.3", "status": "affected"}, {"versionType": "semver", "version": "9.2.0", "lessThanOrEqual": "9.2.8", "status": "affected"}, {"versionType": "semver", "version": "9.1.0", "lessThanOrEqual": "9.1.10", "status": "affected"}, {"versionType": "semver", "version": "8.8.0", "lessThanOrEqual": "8.8.11", "status": "affected"}, {"versionType": "semver", "version": "8.7.0", "lessThanOrEqual": "8.7.6", "status": "affected"}, {"versionType": "semver", "version": "7.2.0", "lessThanOrEqual": "7.2.2", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and reflected cross site scripting (XSS) attack via crafted HTTP requests."}], "providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2024-05-14T16:19:08.151Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-79", "description": "Execute unauthorized code or commands", "type": "CWE"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}}], "solutions": [{"lang": "en", "value": "Please upgrade to FortiNAC version 9.4.5 or above \nPlease upgrade to FortiNAC version 7.4.0 or above \nPlease upgrade to FortiNAC version 7.2.4 or above \n"}], "references": [{"name": "https://fortiguard.com/psirt/FG-IR-24-040", "url": "https://fortiguard.com/psirt/FG-IR-24-040"}]}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-31488", "role": "CISA Coordinator", "options": [{"Exploitation": "None"}, {"Automatable": "No"}, {"Technical Impact": "Total"}], "version": "2.0.3", "timestamp": "2024-05-17T04:00:23.122383Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:fortinet:fortinac:9.4.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "9.4.0", "versionType": "custom", "lessThanOrEqual": "9.4.3"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:9.2.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "9.2.0", "versionType": "custom", "lessThanOrEqual": "9.2.8"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:9.1.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "9.1.0", "versionType": "custom", "lessThanOrEqual": "9.1..10"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:8.8.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "8.8.0", "versionType": "custom", "lessThanOrEqual": "8.8.11"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:8.7.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "8.7.0", "versionType": "custom", "lessThanOrEqual": "8.7.6"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:7.2.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "7.2.0", "versionType": "custom", "lessThanOrEqual": "7.2.2"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:36:26.094Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T01:52:57.296Z"}, "title": "CVE Program Container", "references": [{"name": "https://fortiguard.com/psirt/FG-IR-24-040", "url": "https://fortiguard.com/psirt/FG-IR-24-040", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-31488", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "state": "PUBLISHED", "assignerShortName": "fortinet", "dateReserved": "2024-04-04T12:52:41.585Z", "datePublished": "2024-05-14T16:19:08.151Z", "dateUpdated": "2024-06-04T17:36:26.094Z"}, "containers": {"cna": {"affected": [{"vendor": "Fortinet", "product": "FortiNAC", "defaultStatus": "unaffected", "versions": [{"versionType": "semver", "version": "9.4.0", "lessThanOrEqual": "9.4.3", "status": "affected"}, {"versionType": "semver", "version": "9.2.0", "lessThanOrEqual": "9.2.8", "status": "affected"}, {"versionType": "semver", "version": "9.1.0", "lessThanOrEqual": "9.1.10", "status": "affected"}, {"versionType": "semver", "version": "8.8.0", "lessThanOrEqual": "8.8.11", "status": "affected"}, {"versionType": "semver", "version": "8.7.0", "lessThanOrEqual": "8.7.6", "status": "affected"}, {"versionType": "semver", "version": "7.2.0", "lessThanOrEqual": "7.2.2", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and reflected cross site scripting (XSS) attack via crafted HTTP requests."}], "providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2024-05-14T16:19:08.151Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-79", "description": "Execute unauthorized code or commands", "type": "CWE"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}}], "solutions": [{"lang": "en", "value": "Please upgrade to FortiNAC version 9.4.5 or above \nPlease upgrade to FortiNAC version 7.4.0 or above \nPlease upgrade to FortiNAC version 7.2.4 or above \n"}], "references": [{"name": "https://fortiguard.com/psirt/FG-IR-24-040", "url": "https://fortiguard.com/psirt/FG-IR-24-040"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-31488", "role": "CISA Coordinator", "options": [{"Exploitation": "None"}, {"Automatable": "No"}, {"Technical Impact": "Total"}], "version": "2.0.3", "timestamp": "2024-05-17T04:00:23.122383Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:fortinet:fortinac:9.4.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "9.4.0", "versionType": "custom", "lessThanOrEqual": "9.4.3"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:9.2.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "9.2.0", "versionType": "custom", "lessThanOrEqual": "9.2.8"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:9.1.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "9.1.0", "versionType": "custom", "lessThanOrEqual": "9.1..10"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:8.8.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "8.8.0", "versionType": "custom", "lessThanOrEqual": "8.8.11"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:8.7.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "8.7.0", "versionType": "custom", "lessThanOrEqual": "8.7.6"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:fortinet:fortinac:7.2.0:*:*:*:*:*:*:*"], "vendor": "fortinet", "product": "fortinac", "versions": [{"status": "affected", "version": "7.2.0", "versionType": "custom", "lessThanOrEqual": "7.2.2"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-17T12:21:19.444Z"}, "title": "CISA ADP Vulnrichment"}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*", "matchCriteriaId": "8E178BCE-6212-4C9F-BDED-090DA849F9C1", "versionEndExcluding": "7.2.4", "versionStartIncluding": "7.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortinac:*:*:*:*:*:*:*:*", "matchCriteriaId": "13B96979-AB7A-426A-A6D8-16D6D2295233", "versionEndExcluding": "9.4.5", "versionStartIncluding": "8.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4, 9.2.0 through 9.2.8, 9.1.0 through 9.1.10, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and reflected cross site scripting (XSS) attack via crafted HTTP requests."}, {"lang": "es", "value": "Una neutralizaci\u00f3n inadecuada de entradas durante la vulnerabilidad de generaci\u00f3n de p\u00e1ginas web [CWE-79] en FortiNAC versi\u00f3n 9.4.0 a 9.4.4, 9.2.0 a 9.2.8, 9.1.0 a 9.1.10, 8.8.0 a 8.8.11, 8.7.0 a 8.7.6, 7.2.0 a 7.2.3 pueden permitir que un atacante remoto autenticado realice un ataque de Cross Site Scripting (XSS) almacenado y reflejado a trav\u00e9s de solicitudes HTTP manipuladas."}], "id": "CVE-2024-31488", "lastModified": "2025-01-21T21:47:47.183", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.9, "impactScore": 5.9, "source": "psirt@fortinet.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 6.0, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-05-14T17:17:23.733", "references": [{"source": "psirt@fortinet.com", "tags": ["Vendor Advisory"], "url": "https://fortiguard.com/psirt/FG-IR-24-040"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://fortiguard.com/psirt/FG-IR-24-040"}], "sourceIdentifier": "psirt@fortinet.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "psirt@fortinet.com", "type": "Secondary"}]}