CVE-2023-40719

🗓️ 14 Nov 2023 18:08:08Reported by fortinetType

A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an attacker to access private testing data

Reporter	Title	Published	Views	Family All 8
CNNVD	Fortinet FortiAnalyzer Security Vulnerability	14 Nov 202300:00	–	cnnvd
Cvelist	CVE-2023-40719	14 Nov 202318:08	–	cvelist
EUVD	EUVD-2023-45273	3 Oct 202520:07	–	euvd
NVD	CVE-2023-40719	14 Nov 202319:15	–	nvd
Prion	Hardcoded credentials	14 Nov 202319:15	–	prion
Positive Technologies	PT-2023-7380 · Fortinet · Fortimanager +1	14 Nov 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-40719	9 Jan 202609:24	–	redhatcve
Vulnrichment	CVE-2023-40719	14 Nov 202318:08	–	vulnrichment

NVD

Node

fortinet fortianalyzerRange7.0.0–7.0.10

fortinet fortianalyzerRange7.2.0–7.2.3

fortinet fortianalyzerMatch7.4.0

fortinet fortimanagerRange7.0.0–7.0.10

fortinet fortimanagerRange7.2.0–7.2.3

fortinet fortimanagerMatch7.4.0

[
  {
    "vendor": "Fortinet",
    "product": "FortiAnalyzer",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "7.4.0",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.2.0",
        "lessThanOrEqual": "7.2.3",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.10",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fortinet",
    "product": "FortiManager",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "7.4.0",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.2.0",
        "lessThanOrEqual": "7.2.3",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.10",
        "status": "affected"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.com/psirt/FG-IR-23-177

21 Nov 2024 08:20Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.14.1 - 5.5

EPSS0.00045

SSVC

CWE-798