CVE-2023-40720: High severity fortinet fortivoice enterprise vulnerability
An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiVoiceEntreprise version 7.0.0 through 7.0.1 and before 6.4.8 allows an authenticated attacker to read the SIP configuration of other users via crafted HTTP or HTTPS requests.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-40720?
CVE-2023-40720 is considered a critical vulnerability due to its potential for information disclosure and exploitation by authenticated attackers.
How do I fix CVE-2023-40720?
To fix CVE-2023-40720, upgrade to FortiVoice versions 7.0.2 or later, or to versions 6.4.9 or later.
Who is affected by CVE-2023-40720?
CVE-2023-40720 affects users of FortiVoice Enterprise versions 7.0.0, 7.0.1, and those before 6.4.8.
What type of vulnerability is CVE-2023-40720?
CVE-2023-40720 is categorized as an authorization bypass through user-controlled key vulnerability.
Can an unauthenticated user exploit CVE-2023-40720?
No, CVE-2023-40720 requires an authenticated user to exploit the vulnerability.