AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-36511

LOW · CVSS 3.7 EPSS 0.38%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-09-10 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 3.7. See the original NVD description below for full technical details.

CVE
CVE-2024-36511
Severity
LOW
CVSS
3.7
EPSS
0.38%

Original NVD Description

An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions when cookie security policy is enabled may allow an attacker, under specific conditions, to retrieve the initial encrypted and signed cookie protected by the feature

Related CVEs

Other vulnerabilities affecting the same vendor(s)