CVE-2023-22636
27.02.2023, 09:15
An unauthorized configuration download vulnerability in FortiWeb 6.3.6 through 6.3.21, 6.4.0 through 6.4.2 and 7.0.0 through 7.0.4 may allow a local attacker to access confidential configuration files via a crafted http request.Enginsight
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortiweb | 6.3.6 ≤ 𝑥 ≤ 6.3.21 |
| fortinet | fortiweb | 6.4.0 ≤ 𝑥 ≤ 6.4.2 |
| fortinet | fortiweb | 7.0.0 ≤ 𝑥 ≤ 7.0.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration