Lucene search

PRIOn knowledge basePRION:CVE-2023-40719

HistoryNov 14, 2023 - 7:15 p.m.

Hardcoded credentials

2023-11-1419:15:00

PRIOn knowledge base

www.prio-n.com

fortinet

fortianalyzer

fortimanager

7.0.0

7.0.8

7.2.0

7.2.3

7.4.0

hardcoded credentials

vulnerability

static credentials

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an attacker to access Fortinet private testing data via the use of static credentials.

CPENameOperatorVersion
fortianalyzereq7.4.0
fortianalyzerge7.2.0
fortianalyzerle7.2.3
fortianalyzerge7.0.0
fortianalyzerle7.0.10
fortimanagereq7.4.0
fortimanagerge7.2.0
fortimanagerle7.2.3
fortimanagerge7.0.0
fortimanagerle7.0.10

Name	Operator	Version
fortianalyzer	eq	7.4.0
fortianalyzer	ge	7.2.0
fortianalyzer	le	7.2.3
fortianalyzer	ge	7.0.0
fortianalyzer	le	7.0.10
fortimanager	eq	7.4.0
fortimanager	ge	7.2.0
fortimanager	le	7.2.3
fortimanager	ge	7.0.0
fortimanager	le	7.0.10

References

fortiguard.com/psirt/FG-IR-23-177