An improper access control vulnerability [CWE-284] in FortiADC automation feature 7.1.0 through 7.1.2, 7.0 all versions, 6.2 all versions, 6.1 all versions may allow an authenticated low-privileged attacker to escalate their privileges to super_admin via a specific crafted configuration of fabric automation CLI script.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://fortiguard.com/psirt/FG-IR-22-292 |
History
Wed, 23 Oct 2024 08:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: fortinet
Published: 2023-11-14T18:05:48.807Z
Updated: 2024-10-22T20:52:47.757Z
Reserved: 2023-02-20T15:09:20.635Z
Link: CVE-2023-26205
Vulnrichment
Updated: 2024-08-02T11:39:06.659Z
NVD
Status : Analyzed
Published: 2023-11-14T18:15:28.260
Modified: 2023-11-20T17:58:52.160
Link: CVE-2023-26205
Redhat
No data.