Lucene search

[email protected]CVE-2023-26207

HistoryJun 13, 2023 - 9:15 a.m.

CVE-2023-26207

2023-06-1309:15:16

CWE-532

[email protected]

web.nvd.nist.gov

cve

2023

26207

vulnerability

fortinet

fortios

fortiproxy

log file

attacker

passwords

plain text

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.2 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

17.2%

JSON

An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy 7.0.0 through 7.0.10. 7.2.0 through 7.2.1 allows an attacker to read certain passwords in plain text.

CPENameOperatorVersion
fortinet:fortiproxyfortinet fortiproxyle7.0.10
fortinet:fortiproxyfortinet fortiproxyeq7.0.3
fortinet:fortiproxyfortinet fortiproxyeq7.0.2
fortinet:fortiproxyfortinet fortiproxyeq7.0.8
fortinet:fortiproxyfortinet fortiproxyeq7.0.10
fortinet:fortiproxyfortinet fortiproxyeq7.0.6
fortinet:fortiproxyfortinet fortiproxyeq7.0.1
fortinet:fortiproxyfortinet fortiproxyeq7.0.4
fortinet:fortiproxyfortinet fortiproxyeq7.0.7
fortinet:fortiproxyfortinet fortiproxyeq7.0.5

CPE	Name	Operator	Version
fortinet:fortiproxy	fortinet fortiproxy	le	7.0.10
fortinet:fortiproxy	fortinet fortiproxy	eq	7.0.3
fortinet:fortiproxy	fortinet fortiproxy	eq	7.0.2
fortinet:fortiproxy	fortinet fortiproxy	eq	7.0.8
fortinet:fortiproxy	fortinet fortiproxy	eq	7.0.10
fortinet:fortiproxy	fortinet fortiproxy	eq	7.0.6
fortinet:fortiproxy	fortinet fortiproxy	eq	7.0.1
fortinet:fortiproxy	fortinet fortiproxy	eq	7.0.4
fortinet:fortiproxy	fortinet fortiproxy	eq	7.0.7
fortinet:fortiproxy	fortinet fortiproxy	eq	7.0.5

Rows per page:

1-10 of 201

References

fortiguard.com/psirt/FG-IR-22-455

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.2 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

17.2%

JSON

Related for CVE-2023-26207

cvelist1 prion1 nessus2 fortinet1 ics1