Vulnerability CVE-2023-44254


Published: 2024-09-10

Description:
An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer version 7.4.1 and before 7.2.5 and FortiManager version 7.4.1 and before 7.2.5 may allow a remote attacker with low privileges to read sensitive data via a crafted HTTP request.

 References:
https://fortiguard.com/psirt/FG-IR-23-204

Copyright 2026, cxsecurity.com

 

Back to Top