imPC@ndo IT

Tracker / CVE-2023-41673

CVE-2023-41673

High 7.1

An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS requests.

Affected products and versions

fortinet fortiadc
fortinet fortiadc · 6.0.0 → 6.0.4
fortinet fortiadc · 6.1.0 → 6.1.6
fortinet fortiadc · 6.2.0 → 6.2.6
fortinet fortiadc · 7.0.0 → 7.0.5

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References