CVE-2023-28001: Existing websocket connection persists after deleting API admin
First published: Tue Jul 11 2023(Updated: )
An insufficient session expiration [CWE-613] vulnerability in FortiOS REST API may allow an attacker to keep a secure websocket session active after user deletion.## Workaround:Restrict hosts that can connect to the websocket to trusted ones only, with the trusted host feature.
Credit: psirt@fortinet.com psirt@fortinet.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fortinet FortiOS | >=7.0.0<=7.0.12 | |
| Fortinet FortiOS | >=7.2.0<=7.2.4 | |
| Fortinet FortiOS | >=7.2.0<=7.2.4 | |
| Fortinet FortiOS | >=7.0.0<=7.0.12 |
Remedy
Please upgrade to FortiOS version 7.4.0 or above
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-28001?
CVE-2023-28001 is an insufficient session expiration vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12 and 7.2.0 - 7.2.4 that allows an attacker to execute unauthorized code or commands via reusing the session of a deleted user in the REST API.
What is the severity of CVE-2023-28001?
CVE-2023-28001 has a severity rating of critical (9/10).
How does CVE-2023-28001 affect Fortinet FortiOS?
CVE-2023-28001 affects Fortinet FortiOS versions 7.0.0 - 7.0.12 and 7.2.0 - 7.2.4.
How can an attacker exploit CVE-2023-28001?
An attacker can exploit CVE-2023-28001 by reusing the session of a deleted user in the REST API to execute unauthorized code or commands.
Is there a fix available for CVE-2023-28001?
Yes, Fortinet has released a fix for CVE-2023-28001. It is recommended to update to the latest version of Fortinet FortiOS.
- agent/author
- agent/type
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-latest
- vendor/fortinet
- product/fortios
- canonical/fortinet fortios
- collector/nvd-index
- agent/weakness
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/fortiguard-psirt-latest
- source/FortiGuard
- alias/CVE-2023-28001
- collector/fortiguard-psirt
- agent/software-canonical-lookup
- agent/references
- agent/title
- agent/severity
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- agent/event
- version/fortinet fortios/7.0.0
- version/fortinet fortios/7.0.12
- version/fortinet fortios/7.2.0
- version/fortinet fortios/7.2.4