---
id: 10213
title: "CVE-2024-23108: Fortinet FortiSIEM 2nd Order Command Injection Deep-Dive"
cve: CVE-2024-23108
source_domain: horizon3.ai
source_url: "https://horizon3.ai/attack-research/disclosures/cve-2024-23108-fortinet-fortisiem-2nd-order-command-injection-deep-dive/"
published_at: "2024-05-28T12:08:19Z"
tags: ["vulnerability-research", "command-injection", "fortinet"]
phying_url: "https://phying.com/item/10213"
lang: en
---

# CVE-2024-23108: Fortinet FortiSIEM 2nd Order Command Injection Deep-Dive

## Summary

CVE-2024-23108 Fortinet FortiSIEM Command Injection Deep-Dive and Indicators of Compromise. This blog details a command injection vulnerability which allows an unauthenticated attacker to access the FortiSIEM server as root to execute arbitrary commands.

## Intelligence Metadata

- **Sources:** horizon3.ai
- **CVE:** CVE-2024-23108
- **Published:** 2024-05-28T12:08:19Z
- **Original:** https://horizon3.ai/attack-research/disclosures/cve-2024-23108-fortinet-fortisiem-2nd-order-command-injection-deep-dive/
- **Phying News:** https://phying.com/item/10213