Lucene search
HistoryNov 14, 2023 - 7:15 p.m.
CVE-2023-40719
cve-2023-40719
hard-coded credentials
fortinet
fortianalyzer
fortimanager
static credentials
security vulnerability
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
9.2%
A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an attacker to access Fortinet private testing data via the use of static credentials.
Affected configurations
Node
fortinetfortianalyzerRange7.0.0–7.0.10
ORfortinetfortianalyzerRange7.2.0–7.2.3
ORfortinetfortianalyzerMatch7.4.0
ORfortinetfortimanagerRange7.0.0–7.0.10
ORfortinetfortimanagerRange7.2.0–7.2.3
ORfortinetfortimanagerMatch7.4.0
References
Related
cve
cve
CVE-2023-40719
2023-11-14 19:15:30
cvelist
cvelist
CVE-2023-40719
2023-11-14 18:08:08
prion
prion
Hardcoded credentials
2023-11-14 19:15:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
9.2%
Related for NVD:CVE-2023-40719