PT-2024-13879 · Fortinet · Fortiadc

Name of the Vulnerable Software and Affected Versions: FortiADC versions 6.0 through 7.4.0 Description: The issue is related to an improper certificate validation, which may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the...

PT-2024-13880 · Fortinet · Fortiadc

Name of the Vulnerable Software and Affected Versions: FortiADC versions 7.0 through 7.4.0 Description: An improper certificate validation issue may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and public SDN...

Fortinet FortiADC Trust Management Issue Vulnerability

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. A trust management issue vulnerability exists in the Fortinet FortiADC that stems from the presence of an improper certificate validation vulnerability that could allow a remote, unauthenticated attacker to perform a...

The vulnerability of the FortiADC application delivery controller, related to the disclosure of system data that is not authorized for the controlled area, allows a perpetrator to view arbitrary data.

The vulnerability of the FortiADC application delivery controller is related to the disclosure of system data that are not accessible to those who are not authorized in the controlled area. Exploiting this vulnerability could allow a hacker to access arbitrary data...

CVE-2023-50180

An exposure of sensitive system information to an unauthorized control sphere vulnerability CWE-497 in FortiADC version 7.4.1 and below, version 7.2.3 and below, version 7.1.4 and below, version 7.0.5 and below, version 6.2.6 and below may allow a read-only admin to view data pertaining to other...

CVE-2023-50180

An exposure of sensitive system information to an unauthorized control sphere vulnerability CWE-497 in FortiADC version 7.4.1 and below, version 7.2.3 and below, version 7.1.4 and below, version 7.0.5 and below, version 6.2.6 and below may allow a read-only admin to view data pertaining to other...

CVE-2023-50180

FortiADC (Fortinet) is affected by CVE-2023-50180, where sensitive system information can be exposed to unauthorized control domains. A read-only administrator may view data pertaining to other administrators in versions 7.4.1 and below, 7.2.3 and below, 7.1.4 and below, 7.0.5 and below, and 6.2....

CVE-2023-50180

An exposure of sensitive system information to an unauthorized control sphere vulnerability CWE-497 in FortiADC version 7.4.1 and below, version 7.2.3 and below, version 7.1.4 and below, version 7.0.5 and below, version 6.2.6 and below may allow a read-only admin to view data pertaining to other...

CVE-2023-50180

An exposure of sensitive system information to an unauthorized control sphere vulnerability CWE-497 in FortiADC version 7.4.1 and below, version 7.2.3 and below, version 7.1.4 and below, version 7.0.5 and below, version 6.2.6 and below may allow a read-only admin to view data pertaining to other...

Fortinet FortiADC 安全漏洞

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. A security vulnerability exists in the Fortinet FortiADC that stems from the exposure of sensitive system information to unauthorized control domains, potentially allowing read-only administrators to view data related to...

PT-2024-5553 · Fortinet · Fortiadc

Name of the Vulnerable Software and Affected Versions: FortiADC versions 7.4.0 through 7.4.1 FortiADC versions prior to 7.2.4 Description: The issue is related to improper access control in the administrative interface of FortiADC, allowing a remote attacker to gain write access to arbitrary file...

The vulnerability of the FortiADC application delivery controller, related to incorrect authentication procedures, allows a perpetrator to gain unauthorized access to configuration files.

The vulnerability of the FortiADC application delivery controller is related to an incorrect authentication process. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to configuration files by sending specially crafted HTTP/HTTPS requests...

CVE-2023-41673

An improper authorization vulnerability CWE-285 in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS requests...

CVE-2023-41673

An improper authorization vulnerability CWE-285 in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS requests...

Authorization

An improper authorization vulnerability CWE-285 in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS requests...

CVE-2023-41673

Fortinet FortiADC is affected by an improper authorization vulnerability (CWE-285) that could allow a low-privileged user to read or back up the full system configuration via HTTP(S) requests. Affected products and versions in the provided documents include FortiADC versions 7.4.0 and earlier, wi...

CVE-2023-41673

An improper authorization vulnerability CWE-285 in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS requests...

Fortinet FortiADC Authorization Issues Vulnerability

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. Fortinet FortiADC has an authorization issue vulnerability that stems from the presence of an incorrect authorization vulnerability. A low-privileged user could read or back up the complete system configuration via an HTT...

The vulnerability of the FortiDDoS-F software and the FortiADC web management tool lies in the use of an unauthorized intermediate policy file, allowing attackers to access confidential information.

The vulnerability of the FortiDDoS-F software and the FortiADC web management tool lies in the use of an unauthorized intermediate policy file. Exploiting this vulnerability can allow attackers to access confidential information...

The vulnerability of the FortiDDoS-F software and the FortiADC application delivery controller, which involves copying buffers without checking the size of the input data, allows attackers to execute arbitrary code or perform arbitrary commands.

The vulnerability of the FortiDDoS-F software-defined security platform and the FortiADC application delivery controller lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or perform arbitrary...