Improper Output Neutralization Vulnerability in Fortinet FortiAnalyzer and FortiManager

CVE-2024-52962

What is CVE-2024-52962?

An improper output neutralization vulnerability in Fortinet's FortiAnalyzer and FortiManager products allows unauthenticated remote attackers to manipulate log files. By sending specially crafted login requests, they can introduce malicious content into the logs, potentially leading to further exploitation. This issue affects multiple versions of both products, underscoring the importance of updating to secure releases to mitigate risks associated with log pollution and its implications in security monitoring.

References