CVE-2024-50562

| EUVD-2025-17805 MEDIUM
2025-06-10 [email protected]
4.8
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

4
Analysis Generated
Mar 14, 2026 - 19:49 vuln.today
EUVD ID Assigned
Mar 14, 2026 - 19:49 euvd
EUVD-2025-17805
PoC Detected
Jul 25, 2025 - 15:25 vuln.today
Public exploit code
CVE Published
Jun 10, 2025 - 17:19 nvd
MEDIUM 4.8

Tags

Fortinet Information Disclosure Fortios Fortisase

Description

An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions may allow an attacker in possession of a cookie used to log in the SSL-VPN portal to log in again, although the session has expired or was logged out.

Analysis

An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions may allow an attacker in possession of a cookie used to log in the SSL-VPN portal to log in again, although the session has expired or was logged out.

Technical Context

This vulnerability is classified as Insufficient Session Expiration (CWE-613).

Affected Products

Affected products: Fortinet Fortisase 24.4.60, Fortinet Fortios

Remediation

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

Priority Score

44
Low Medium High Critical
KEV: 0
EPSS: +0.4
CVSS: +24
POC: +20

Share

CVE-2024-50562 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy