CVE-2024-54020

LOW Year: 2024
CVSS v3 Score
2.3
Low
Weakness Type
CWE-862
View all →

Vulnerability Description

A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may allow an authenticated attacker to overwrite global threat feeds via crafted update requests.

Related Vulnerabilities

CVE-2020-29480

LOW
CVSS:2.3(Low)

An issue was discovered in Xen through 4.14.x. Neither xenstore implementation does any permission checks when reporting a xenstore watch event. A guest administrator can watch the root xenstored node...

CWE-8622020

CVE-2022-20240

LOW
CVSS:2.3(Low)

In sOpAllowSystemRestrictionBypass of AppOpsManager.java, there is a possible leak of location information due to a missing permission check. This could lead to local escalation of privilege with Syst...

CWE-8622022

CVE-2022-20261

LOW
CVSS:2.3(Low)

In LocationManager, there is a possible way to get location information due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User...

CWE-8622022

CVE-2018-21046

LOW
CVSS:2.4(Low)

An issue was discovered on Samsung mobile devices with O(8.x) software. There is clipboard Data Exposure via the Emergency Dialer upon connecting a USB device. The Samsung ID is SVE-2018-12911 (Novemb...

CWE-8622018

CVE-2021-1755

LOW
CVSS:2.4(Low)

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A person with physical access t...

CWE-8622021

CVE-2022-20529

LOW
CVSS:2.4(Low)

In multiple locations of WifiDialogActivity.java, there is a possible limited lockscreen bypass due to a logic error in the code. This could lead to local escalation of privilege in wifi settings with...

CWE-8622022