CVE-2023-41679
10.10.2023, 17:15
An improper access control vulnerability [CWE-284] in FortiManager management interface 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions may allow a remote and authenticated attacker with at least "device management" permission on his profile and belonging to a specific ADOM to add and delete CLI script on other ADOMsEnginsight
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortimanager | 6.0.0 ≤ 𝑥 ≤ 6.0.12 |
| fortinet | fortimanager | 6.2.0 ≤ 𝑥 ≤ 6.2.12 |
| fortinet | fortimanager | 6.4.0 ≤ 𝑥 ≤ 6.4.11 |
| fortinet | fortimanager | 7.0.0 ≤ 𝑥 ≤ 7.0.7 |
| fortinet | fortimanager | 7.2.0 |
| fortinet | fortimanager | 7.2.1 |
| fortinet | fortimanager | 7.2.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration