CVE-2023-25603 — Fortinet / FortiDDoS-F

CVE-2023-25603

Fortinet / FortiDDoS-F PUBLISHED

Description (CNA)

A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.3.0 - 6.3.4 and 6.4.0 - 6.4.1 allow an unauthorized attacker to carry out privileged actions and retrieve sensitive information via crafted web requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiDDoS-F	affected 6.4.0 through 6.4.1; affected 6.3.0 through 6.3.4
Fortinet / FortiADC	affected 7.1.0 through 7.1.1

CWE

CWE-942

References

https://fortiguard.com/psirt/FG-IR-22-518

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/psirt/FG-IR-22-518

CISA-ADP

No English description supplied.

No references supplied.