medium4.9
CVE-2023-50181
An improper access control vulnerability [CWE-284] in Fortinet FortiADC version 7.4.0 through 7.4.1 and before 7.2.4 allows a read only authenticated attacker …
Impact
An improper access control vulnerability [CWE-284] in Fortinet FortiADC version 7.4.0 through 7.4.1 and before 7.2.4 allows a read only authenticated attacker to perform some write actions via crafted HTTP or HTTPS requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiadc | from 6.0.0 before 7.2.5 from 7.4.0 before 7.4.2 |