← CVE Intelligence

CVE-2023-45581

Fortinet / FortiClientEMS PUBLISHED

Description (CNA)

An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, FortiClientEMS 7.0.6 through 7.0.10, FortiClientEMS 7.0.0 through 7.0.4, FortiClientEMS 6.4 all versions, FortiClientEMS 06.02 all versions, FortiClientEMS 6.2 all versions allows an Site administrator with Super Admin privileges to perform global administrative operations affecting other sites via crafted HTTP or HTTPS requests.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiClientEMSaffected 7.2.0 through 7.2.2; affected 7.0.6 through 7.0.10; affected 7.0.0 through 7.0.4; affected 6.4.7 through 6.4.9; affected 6.4.0 through 6.4.4; affected 6.2.6 through 6.2.9; affected 6.2.3 through 6.2.4; affected 06.02.00 through 06.02.02

CWE

CWE-269

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.