Vulnerabilities > CVE-2024-27782 - Insufficient Session Expiration vulnerability in Fortinet Fortiaiops 2.0.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Multiple insufficient session expiration vulnerabilities [CWE-613] in FortiAIOps version 2.0.0 may allow an attacker to re-use stolen old session tokens to perform unauthorized operations via crafted requests.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |