Lucene search

FortinetVULNRICHMENT:CVE-2023-44256

HistoryOct 20, 2023 - 9:04 a.m.

CVE-2023-44256

2023-10-2009:04:52

CWE-22

fortinet

github.com

vulnerability

server-side request forgery

fortinet fortianalyzer

fortimanager

low privileges

sensitive data

internal servers

crafted http request

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:F

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

54.6%

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

A server-side request forgery vulnerability [CWE-918] in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 and FortiManager version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 allows a remote attacker with low privileges to view sensitive data from internal servers or perform a local port scan via a crafted HTTP request.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*"
    ],
    "vendor": "fortinet",
    "product": "fortianalyzer",
    "versions": [
      {
        "status": "affected",
        "version": "7.4.0"
      },
      {
        "status": "affected",
        "version": "7.2.0",
        "versionType": "custom",
        "lessThanOrEqual": "7.2.3"
      },
      {
        "status": "affected",
        "version": "7.0.2",
        "versionType": "custom",
        "lessThanOrEqual": "7.0.8"
      },
      {
        "status": "affected",
        "version": "6.4.8",
        "versionType": "custom",
        "lessThanOrEqual": "6.4.13"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*"
    ],
    "vendor": "fortinet",
    "product": "fortimanager",
    "versions": [
      {
        "status": "affected",
        "version": "7.4.0"
      },
      {
        "status": "affected",
        "version": "7.2.0",
        "versionType": "custom",
        "lessThanOrEqual": "7.2.3"
      },
      {
        "status": "affected",
        "version": "7.0.0",
        "versionType": "custom",
        "lessThanOrEqual": "7.0.8"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

fortiguard.com/psirt/FG-IR-19-039

github.com/orangecertcc/security-research/security/advisories/GHSA-2hc5-p5mc-8vrh

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:F

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

54.6%

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Related for VULNRICHMENT:CVE-2023-44256