CVE-2023-27998 — Fortinet / FortiPresence

CVE-2023-27998

Fortinet / FortiPresence PUBLISHED

Description (CNA)

A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1.1 and 1.0 may allow an unauthenticated attacker with the ability to navigate to the login GUI to gain sensitive information via navigating to specific HTTP(s) paths.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiPresence	affected 1.2.0 through 1.2.1; affected 1.1.0 through 1.1.1; affected 1.0.0

CWE

CWE-756

References

https://fortiguard.com/psirt/FG-IR-22-288

ADP enrichment

CVE

No English description supplied.

https://fortiguard.com/psirt/FG-IR-22-288

CISA-ADP

No English description supplied.

No references supplied.