medium4.1
CVE-2023-44255
An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 and FortiAnalyzer-Big…
Impact
An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 and FortiAnalyzer-BigData before 7.2.5 may allow a privileged attacker with administrative read permissions to read event logs of another adom via crafted HTTP or HTTPs requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortianalyzer | from 6.2.0 before 7.4.3 |
| Fortinet | Fortianalyzer Big Data | from 6.2.1 before 7.2.6 |
| Fortinet | Fortimanager | from 6.2.0 before 7.4.3 |