Lucene search

[email protected]NVD:CVE-2023-50178

HistoryJul 09, 2024 - 4:15 p.m.

CVE-2023-50178

2024-07-0916:15:03

CWE-295

[email protected]

web.nvd.nist.gov

fortiadc

certificate validation

remote attack

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

Percentile

9.2%

JSON

An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2.0 through 7.2.3, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions and 6.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and various remote servers such as private SDN connectors and FortiToken Cloud.

Affected configurations

Nvd

Node

fortinetfortiadcRange6.0.0–6.0.4

fortinetfortiadcRange6.1.0–6.1.6

fortinetfortiadcRange6.2.0–6.2.6

fortinetfortiadcRange7.0.0–7.0.2

fortinetfortiadcRange7.1.0–7.2.3

fortinetfortiadcMatch7.4.0

VendorProductVersionCPE
fortinetfortiadc*cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*
fortinetfortiadc7.4.0cpe:2.3:a:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fortinet	fortiadc	*	cpe:2.3:a:fortinet:fortiadc::::::::
fortinet	fortiadc	7.4.0	cpe:2.3:a:fortinet:fortiadc:7.4.0:::::::*

References

fortiguard.fortinet.com/psirt/FG-IR-22-298

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

Percentile

9.2%

JSON

Related for NVD:CVE-2023-50178

vulnrichment1 cve1 cvelist1