Fortinet has issued security patches to rectify a severe security weakness affecting FortiSwitch that might allow an assailant to perform unauthorized modifications to passwords.
The flaw, identified as CVE-2024-48887, has a CVSS rating of 9.3 on a scale where the highest score is 10.0.
“A vulnerability concerning unverified password alterations [CWE-620] in the FortiSwitch GUI could enable a remote, unauthenticated attacker to change