NetSight
high7.1

CVE-2023-41673

An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the ful…

Impact

An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS requests.

Affected products

VendorProductAffected versions
FortinetFortiadc
from 6.0.0 through 6.0.4
from 6.1.0 through 6.1.6
from 6.2.0 through 6.2.6
from 7.0.0 through 7.0.5
Versions 7.1.0, 7.1.1

Weakness classification

References