CVE-2023-44253 in FortiManager

Riassunto

di MITRE • 15/02/2024

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version 7.4.0 through 7.4.1 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.1 and before 7.2.5 and FortiAnalyzer-BigData before 7.2.5 allows an adom administrator to enumerate other adoms and device names via crafted HTTP or HTTPS requests.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsabile: Fortinet, Inc.
• Prenotare: 27/09/2023
• Divulgazione: 15/02/2024
• Moderazione: accettato
• Voce: VDB-253942
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 5.0 (CNA)
• EPSS: 0.00682
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-44253
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-44253
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-44253/