CVE-2023-25605: High severity fortinet fortisoar imap connector vulnerability
A improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker authenticated on the administrative interface to perform unauthorized actions via crafted HTTP requests.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-25605?
CVE-2023-25605 is classified as a high-severity vulnerability due to its potential to allow unauthorized actions by authenticated users.
How do I fix CVE-2023-25605?
To fix CVE-2023-25605, upgrade Fortinet FortiSOAR to version 7.3.2 or later to mitigate the improper access control.
What types of actions can be performed by exploiting CVE-2023-25605?
Exploiting CVE-2023-25605 can allow an authenticated attacker to perform unauthorized administrative actions via crafted HTTP requests.
Who is affected by CVE-2023-25605?
CVE-2023-25605 affects users of Fortinet FortiSOAR versions 7.3.0 and 7.3.1.
Is there a workaround for CVE-2023-25605?
There are no official workarounds for CVE-2023-25605; updating the software is the recommended course of action.