Fortinet has reported that its FortiSIEM solution is impacted by two new vulnerabilities that circumvent fixes issued for a critical remote code execution flaw, tracked as CVE-2023-34992, after mistakenly disclosing the newly identified issues as duplicates of the older bug, according to BleepingComputer. Both new vulnerabilities, tracked as CVE-2024-23108 and CVE-2024-23109, are variants of the original bug and could all be exploited to facilitate unauthorized command execution through crafted API requests, said Fortinet.

Source: SC Magazine