CVE-2023-40719

A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an attacker to access Fortinet private testing data via the use of static credentials...

Hardcoded credentials

A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an attacker to access Fortinet private testing data via the use of static credentials...

CVE-2023-40719

CVE-2023-40719 concerns Fortinet FortiAnalyzer and FortiManager where a hard-coded credentials vulnerability affects FortiAnalyzer/FortiManager versions 7.0.0–7.0.8, 7.2.0–7.2.3, and 7.4.0. The underlying issue permits an attacker to access Fortinet private testing data via static credentials. Re...

CVE-2023-40719

A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an attacker to access Fortinet private testing data via the use of static credentials...

Fortinet FortiAnalyzer Security Vulnerability

Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The product is primarily used to collect network log data and analyze, report, and archive security events, network traffic, and Web content from the logs through the Reporting...

PT-2023-7380 · Fortinet · Fortimanager +1

Name of the Vulnerable Software and Affected Versions: Fortinet FortiAnalyzer and FortiManager versions 7.0.0 through 7.0.8 Fortinet FortiAnalyzer and FortiManager versions 7.2.0 through 7.2.3 Fortinet FortiAnalyzer and FortiManager version 7.4.0 Description: A use of hard-coded credentials issue...

Use of hardcoded credentials in fmgsvrd

...

CVE-2023-40719: Use of Hard-coded Credentials

A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an attacker to access Fortinet private testing data via the use of static credentials...

The vulnerability of the centralized management of Fortinet FortiManager devices and FortiAnalyzer network firewalls arises from insufficient validation of incoming requests, allowing attackers to disclose protected information.

The vulnerability of Fortinet’s FortiManager device management system and FortiAnalyzer network monitoring system lies in the insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially crafted HTTP reque...

CVE-2023-44256

A server-side request forgery vulnerability CWE-918 in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 and FortiManager version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 allows a remote attacker with low privileges to view sensitive data from internal...

CVE-2023-44256

A server-side request forgery vulnerability CWE-918 in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 and FortiManager version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 allows a remote attacker with low privileges to view sensitive data from internal...

Server side request forgery (ssrf)

A server-side request forgery vulnerability CWE-918 in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 and FortiManager version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 allows a remote attacker with low privileges to view sensitive data from internal...

CVE-2023-44256

CVE-2023-44256 affects Fortinet FortiAnalyzer and FortiManager. A server-side request forgery (SSRF) vulnerability allows a remote, low-privilege attacker to view sensitive data from internal servers or perform a local port scan via a crafted HTTP request. Affected: FortiAnalyzer 7.4.0 and 7.2.0–...

CVE-2023-44256

A server-side request forgery vulnerability CWE-918 in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 and FortiManager version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 allows a remote attacker with low privileges to view sensitive data from internal...

CVE-2023-44256

A server-side request forgery vulnerability CWE-918 in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 and FortiManager version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 allows a remote attacker with low privileges to view sensitive data from internal...

CVE-2023-44256: Improper Limitation of a Pathname to a Restricted Directory

A server-side request forgery vulnerability CWE-918 in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 and FortiManager version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 allows a remote attacker with low privileges to view sensitive data from internal...

The vulnerability of the software interface for centralized device management in Fortinet’s FortiManager, FortiAnalyzer network switches, and FortiADC application delivery controller allows a perpetrator to execute arbitrary commands.

The vulnerability of the software interface for centralized device management in Fortinet’s FortiManager, FortiAnalyzer network monitoring devices, and FortiADC application delivery controller is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allow...

The vulnerability of the management interface of Fortinet’s FortiManager device, related to access control deficiencies, allows a perpetrator to add or remove CLI scripts from other ADOMs.

The vulnerability of the Fortinet FortiManager device management interface is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to add or remove CLI scripts from other ADOMs remotely...

The vulnerability of the software for centralized device management by Fortinet’s FortiManager and FortiAnalyzer devices lies in the implementation of security functions at the client side. This allows a malicious actor to gain privileged access.

The vulnerability of the software for centralized device management by Fortinet’s FortiManager and the network firewall FortiAnalyzer is related to the implementation of security functions at the client side. Exploiting this vulnerability can allow a malicious actor to gain privileged access...

The software’s vulnerability regarding centralized device management by Fortinet FortiManager and the FortiAnalyzer network firewall, related to an error in processing user-controlled authentication keys, allows a perpetrator to access confidential data.

The vulnerability of the software for centralized device management by Fortinet’s FortiManager and FortiAnalyzer lies in a processing error related to authentication keys, which are controlled by users. Exploiting this vulnerability allows an attacker to gain access to confidential data remotely...