CVE-2023-50180

Published: May 14, 2024Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiADC version 7.4.1 and below, version 7.2.3 and below, version 7.1.4 and below, version 7.0.5 and below, version 6.2.6 and below may allow a read-only admin to view data pertaining to other admins.

Affected (6)

Products: Fortinet: Fortiadc

Fortinet

1 product

Fortiadc

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortiadc	Up to 6.2.6
Fortinet Fortiadc	From 7.0.0 to 7.0.5
Fortinet Fortiadc	From 7.1.0 to 7.1.4
Fortinet Fortiadc	From 7.2.0 to 7.2.3
Fortinet Fortiadc	Version 7.4.0
Fortinet Fortiadc	Version 7.4.1

Related CWEs

CWE-497

Exposure of Sensitive System Information to an Unauthorized Control Sphere

The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

References (2)

https://fortiguard.com/psirt/FG-IR-23-433

Source: psirt@fortinet.com

Vendor Advisory

https://fortiguard.com/psirt/FG-IR-23-433

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.