CVE-2024-47571

An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper access to FortiGate via valid credentials.

Scoring

Severity

HIGH

CVSS base score

7.9

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C

EPSS probability

0.91%

CWE

CWE-672

Published

2025-01-14

Last modified

2026-03-13

Affected products

• Fortinet FortiManager
• Fortinet FortiManager
• Fortinet FortiManager
• Fortinet FortiManager

Weakness type

• CWE-672

Related vulnerabilities

• CVE-2026-53637 — Sylius: Cart FormComponent allows modification or deletion of an already-completed order
• CVE-2026-55250 — Maravel-Framework Token Replay Vulnerability via Premature JWT Blacklist Eviction in Tagged Caches
• CVE-2026-61699 — nebula-mesh: Certificate revocation is never enforced at the mesh
• CVE-2026-85044 — Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a...
• CVE-2026-19538 — Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS
• CVE-2026-79010 — Operation on a resource after expiration or release in Network in Google Chrome prior to...
• CVE-2026-44725 — EMQX: Stale plugins allow grants amplify a compromised admin/API key to remote code execution
• CVE-2026-52733 — ZEBRA: Persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop_tip

Markdown version · Browse all CVEs