Lucene search

PRIOn knowledge basePRION:CVE-2023-22636

HistoryFeb 27, 2023 - 9:15 a.m.

Design/Logic Flaw

2023-02-2709:15:00

PRIOn knowledge base

www.prio-n.com

fortiweb

vulnerability

configuration

download

local attacker

confidential files

crafted http request

3.9 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An unauthorized configuration download vulnerability in FortiWeb 6.3.6 through 6.3.21, 6.4.0 through 6.4.2 and 7.0.0 through 7.0.4 may allow a local attacker to access confidential configuration files via a crafted http request.

CPENameOperatorVersion
fortiwebge6.3.6
fortiweble6.3.21
fortiwebge6.4.0
fortiweble6.4.2
fortiwebge7.0.0
fortiweble7.0.4

Name	Operator	Version
fortiweb	ge	6.3.6
fortiweb	le	6.3.21
fortiweb	ge	6.4.0
fortiweb	le	6.4.2
fortiweb	ge	7.0.0
fortiweb	le	7.0.4

References

fortiguard.com/psirt/FG-IR-22-460