Tracker / CVE-2023-44255
CVE-2023-44255
Medium 4.1
An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 and FortiAnalyzer-BigData before 7.2.5 may allow a privileged attacker with administrative read permissions to read event logs of another adom via crafted HTTP or HTTPs requests.
Affected products and versions
| fortinet | fortianalyzer · 6.2.0 → 7.4.3 |
|---|---|
| fortinet | fortianalyzer_big_data · 6.2.1 → 7.2.6 |
| fortinet | fortimanager · 6.2.0 → 7.4.3 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.