Vulnerability CVE-2023-46717


Published: 2024-03-12

Description:
An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and versions 7.0.12 and below when configured with FortiAuthenticator in HA may allow a readonly user to gain read-write access via successive login attempts.

Type:

CWE-287

(Improper Authentication)

 References:
https://fortiguard.com/psirt/FG-IR-23-424

Copyright 2024, cxsecurity.com

 

Back to Top