{"vulnerability": "CVE-2024-3650", "sightings": [{"uuid": "39771d04-916b-4082-9676-149dbd9241a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36507", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113471621703891497", "content": "", "creation_timestamp": "2024-11-12T19:25:41.097531Z"}, {"uuid": "973fd6c3-9487-409c-aabc-e26cb1c9f629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36509", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113471621703891497", "content": "", "creation_timestamp": "2024-11-12T19:25:40.905614Z"}, {"uuid": "002a6cde-b531-4eef-b858-98fc8e21c481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36504", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827355168656132", "content": "", "creation_timestamp": "2025-01-14T15:13:22.796596Z"}, {"uuid": "16ebff06-4d91-44eb-ace2-5280ba2cd4cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36506", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113827355182773020", "content": "", "creation_timestamp": "2025-01-14T15:13:22.893195Z"}, {"uuid": "d082f06b-628e-4f5b-b9b1-8942d5edcb2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36504", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgvkjwax2n", "content": "", "creation_timestamp": "2025-01-14T14:17:03.801944Z"}, {"uuid": "9950d75a-cb77-4700-80fa-5ad2e16d5690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36506", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgvmtn2g2d", "content": "", "creation_timestamp": "2025-01-14T14:17:06.438153Z"}, {"uuid": "70591059-9b34-40b3-85c0-1a300f1b86a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36508", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113986226670304919", "content": "", "creation_timestamp": "2025-02-11T16:36:29.319103Z"}, {"uuid": "b90e66fc-deb3-4aae-9435-7513070b3b40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36508", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5y2uyry2d", "content": "", "creation_timestamp": "2025-02-11T17:16:25.791004Z"}, {"uuid": "649b7f42-d157-4f9f-9411-81657175902e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36508", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113986497919466758", "content": "", "creation_timestamp": "2025-02-11T17:45:29.052655Z"}, {"uuid": "1041f66d-7dc1-44f3-9772-6e74be4d3d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36508", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhwbkawrp22w", "content": "", "creation_timestamp": "2025-02-11T18:20:19.076934Z"}, {"uuid": "8a385e14-beee-4099-8892-97890e54f170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36504", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-06", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "e3660525-0c64-4fb0-b779-0123cf005da5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36508", "type": "seen", "source": "https://t.me/cvedetector/17728", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-36508 - Fortinet FortiManager FortiAnalyzer Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-36508 \nPublished : Feb. 11, 2025, 5:15 p.m. | 58\u00a0minutes ago \nDescription : An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 and Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 CLI allows an authenticated admin user with diagnose privileges to delete files on the system. \nSeverity: 6.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T19:53:01.000000Z"}, {"uuid": "f6666152-0f83-498a-b5f3-bb65edd0d772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36506", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1768", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-36506\n\ud83d\udd39 Description: An improper verification of source of a communication channel vulnerability [CWE-940] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, 6.4 all versions may allow a remote attacker to bypass the trusted host feature via session connection.\n\ud83d\udccf Published: 2025-01-14T14:09:52.227Z\n\ud83d\udccf Modified: 2025-01-15T14:55:47.884Z\n\ud83d\udd17 References:\n1. https://fortiguard.fortinet.com/psirt/FG-IR-24-078", "creation_timestamp": "2025-01-15T15:10:45.000000Z"}, {"uuid": "8ca0a35f-032b-427e-a435-0426e52cd805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36505", "type": "seen", "source": "https://t.me/cvedetector/3029", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-36505 - FortiOS Incorrect File Integrity Checking Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-36505 \nPublished : Aug. 13, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker who has already successfully obtained write access to the underlying system (via another hypothetical exploit) to bypass the file integrity checking system. \nSeverity: 5.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T18:47:36.000000Z"}]}