Orta CVSS 5.3
CVE-2025-54973: Fortianalyzer: yarış durumu
Açıklama (NVD)
A concurrent execution using shared resource with improper synchronization ('Race Condition') vulnerability [CWE-362] in Fortinet FortiAnalyzer version 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10 and before 7.0.13 allows an attacker to attempt to win a race condition to bypass the FortiCloud SSO authorization via crafted FortiCloud SSO requests.
Özet bilgiler
- Ürün
- Fortinet Fortianalyzer
- CVSS v3.1
- 5.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N - EPSS
- %0,32 (yüzdelik 25)
- CWE
- CWE-362
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| fortinet-fortianalyzer | 7.0.9 | — | 7.0.14 |
| fortinet-fortianalyzer | 7.2.0 | — | 7.2.11 |
| fortinet-fortianalyzer | 7.4.0 | — | 7.4.7 |
| fortinet-fortianalyzer | 7.6.0 | — | 7.6.3 |