Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-46717

An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and versions 7.0.12 and below when configured with FortiAuthenticator in HA may allow a readonly user to gain read-write access via successive login attempts.

Published

2024-03-12T15:15:46.487

Last Modified

2024-11-21T08:29:08.597

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Primary
    CWE-287
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System fortinet fortios < 7.0.13 Yes
Operating System fortinet fortios < 7.2.7 Yes
Operating System fortinet fortios < 7.4.2 Yes
References