Lucene search
HistoryDec 13, 2023 - 7:15 a.m.
CVE-2023-41673
vulnerability
fortinet
fortiadc
authorization
cwe-285
http
https
configuration
cve-2023-41673
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
0.0004 Low
EPSS
Percentile
14.2%
An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS requests.
Affected configurations
Node
fortinetfortiadcRange6.0.0–6.0.4
ORfortinetfortiadcRange6.1.0–6.1.6
ORfortinetfortiadcRange6.2.0–6.2.6
ORfortinetfortiadcRange7.0.0–7.0.5
ORfortinetfortiadcMatch7.1.0
ORfortinetfortiadcMatch7.1.1
ORfortinetfortiadcMatch7.1.2
ORfortinetfortiadcMatch7.2.0
ORfortinetfortiadcMatch7.4.0
References
Related
prion
prion
Authorization
2023-12-13 07:15:00
cvelist
cvelist
CVE-2023-41673
2023-12-13 06:43:21
cve
cve
CVE-2023-41673
2023-12-13 07:15:15
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
0.0004 Low
EPSS
Percentile
14.2%
Related for NVD:CVE-2023-41673