← CVE Intelligence

CVE-2023-44254

Fortinet / FortiAnalyzer PUBLISHED

Description (CNA)

An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer version 7.4.1 and before 7.2.5 and FortiManager version 7.4.1 and before 7.2.5 may allow a remote attacker with low privileges to read sensitive data via a crafted HTTP request.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiAnalyzeraffected 7.4.0; affected 7.2.0 through 7.2.4; affected 7.0.0 through 7.0.12; affected 6.4.0 through 6.4.14; affected 6.2.0 through 6.2.12
Fortinet / FortiManageraffected 7.4.0; affected 7.2.0 through 7.2.4; affected 7.0.0 through 7.0.12; affected 6.4.0 through 6.4.14; affected 6.2.0 through 6.2.12

CWE

CWE-639

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.