{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3afortinetfortisiem7.1.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortisiem:7.1.1:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":10,"id":"CVE-2024-23108"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FortiSIEM"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Fortinet"],"content_html":"\u003cp\u003eThe German Federal Office for Information Security (BSI) has released a security advisory regarding a vulnerability in Fortinet FortiSIEM. This flaw allows a remote, authenticated attacker to perform unauthorized data manipulation within the FortiSIEM environment. By leveraging the identified vulnerability, documented as CVE-2024-23108, an attacker who has already achieved authentication to the system can compromise the integrity of security logs, configuration data, or other sensitive information handled by the SIEM. Because this flaw requires an existing authentication context, defenders should prioritize the review of access controls and monitor for suspicious administrative or data-altering actions performed by authenticated service accounts or user sessions.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe successful exploitation of this vulnerability results in the degradation of data integrity within FortiSIEM. This could allow an attacker to obfuscate malicious activity by altering security logs, bypassing detection rules, or modifying operational settings. Organizations relying on FortiSIEM for centralized visibility and incident response are particularly at risk, as the integrity of the SIEM platform is foundational to effective security operations.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePrioritize the identification and application of firmware updates provided by Fortinet for affected FortiSIEM installations. Since the attack requires authentication, monitor for anomalous activity in administrative sessions, such as unexpected API calls or file modification events, for all users who have access to the SIEM's backend or data management functions.\u003c/p\u003e\n","date_modified":"2026-08-13T12:42:20Z","date_published":"2026-08-13T12:42:20Z","id":"https://feed.craftedsignal.io/briefs/2026-08-fortinet-fortisiem-data-manipulation/","summary":"A vulnerability in Fortinet FortiSIEM allows a remote, authenticated attacker to manipulate system data, posing a risk to data integrity within the security platform.","title":"Data Manipulation Vulnerability in Fortinet FortiSIEM","url":"https://feed.craftedsignal.io/briefs/2026-08-fortinet-fortisiem-data-manipulation/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:fortinet:fortisiem:7.1.1:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}