| |
Vulnerability CVE-2023-40720
Published: 2024-05-14
| Description: |
An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiVoiceEntreprise version 7.0.0 through 7.0.1 and before 6.4.8 allows an authenticated attacker to read the SIP configuration of other users via crafted HTTP or HTTPS requests. |
Type:
CWE-639 (Authorization Bypass Through User-Controlled Key)
References: |
https://fortiguard.com/psirt/FG-IR-23-282
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
