---
cve: "CVE-2024-52962"
severity: "MEDIUM"
cvss: 5.0
epss: "48%"
vendor: "Fortinet"
kev: false
exploited: false
published: "2025-04-08 14:15:32"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-09-03T11:05:52+02:00"
---

# CVE-2024-52962

> 5.0 MEDIUM

## Beschreibung

An Improper Output Neutralization for Logs vulnerability [CWE-117] in FortiAnalyzer version 7.6.1 and below, version 7.4.5 and below, version 7.2.8 and below, version 7.0.13 and below and FortiManager version 7.6.1 and below, version 7.4.5 and below, version 7.2.8 and below, version 7.0.12 and below may allow an unauthenticated remote attacker to pollute the logs via crafted login requests.

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Keine | good |
| I Integrität | Gering | warn |
| A Verfügbarkeit | Keine | good |

## Schwachstellen-Klasse

- **CWE-117** — Improper Output Neutralization for Logs
  The product constructs a log message from external input, but it does not neutralize or incorrectly neutralizes special elements when the message is written to a log file.

## Angriffsmuster (CAPEC)

- [CAPEC-81 — Web Server Logs Tampering](https://capec.mitre.org/data/definitions/81.html) _(Severity: High)_
- [CAPEC-93 — Log Injection-Tampering-Forging](https://capec.mitre.org/data/definitions/93.html) _(Severity: High)_
- [CAPEC-268 — Audit Log Manipulation](https://capec.mitre.org/data/definitions/268.html)

## ATT&CK-Techniken

- [T1070 — Indicator Removal on Host](https://attack.mitre.org/techniques/T1070/)
- [T1562.002 — Impair Defenses: Disable Windows Event Logging](https://attack.mitre.org/techniques/T1562/002/)
- [T1562.003 — Impair Defenses: Impair Command History Logging](https://attack.mitre.org/techniques/T1562/003/)
- [T1562.008 — Impair Defenses: Disable Cloud Logs](https://attack.mitre.org/techniques/T1562/008/)

## Referenzen

- <https://fortiguard.fortinet.com/psirt/FG-IR-24-453>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2024-52962) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_