CVE-2023-34984: High severity Fortinet FortiWeb vulnerability
A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6 through 6.3.23 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-34984?
CVE-2023-34984 is a vulnerability in Fortinet FortiWeb that allows attackers to execute unauthorized code or commands.
What is the severity of CVE-2023-34984?
The severity of CVE-2023-34984 is high with a severity value of 8.8.
Which versions of Fortinet FortiWeb are affected by CVE-2023-34984?
Fortinet FortiWeb versions 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, and 6.3.6 through 6.3.23 are affected by CVE-2023-34984.
How can an attacker exploit CVE-2023-34984?
An attacker can exploit CVE-2023-34984 by sending specially crafted HTTP requests to the vulnerable Fortinet FortiWeb devices.
Is there a fix available for CVE-2023-34984?
Yes, Fortinet has released a fix for CVE-2023-34984. It is recommended to update to the latest patched version of the affected Fortinet FortiWeb software.