CVE-2023-41673: High severity fortinet fortiadc vulnerability
Published Dec 13, 2023
·Updated
An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS requests.
Affected Software
9 affected components
Fortinet FortiADC>=6.0.0<=6.0.4
Fortinet FortiADC>=6.1.0<=6.1.6
Fortinet FortiADC>=6.2.0<=6.2.6
Fortinet FortiADC>=7.0.0<=7.0.5
Fortinet FortiADC=7.1.0
Fortinet FortiADC=7.1.1
Fortinet FortiADC=7.1.2
Fortinet FortiADC=7.2.0
Fortinet FortiADC=7.4.0
Remediation
Information
Please upgrade to FortiADC version 7.4.1 or above
Please upgrade to FortiADC version 7.2.3 or above
Event History
Dec 13, 2023
CVE Published
06:43 AM
Data Sourced
06:43 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-41673?
CVE-2023-41673 is classified as a medium severity vulnerability due to improper authorization.
2
How do I fix CVE-2023-41673?
To fix CVE-2023-41673, upgrade to Fortinet FortiADC version 7.4.1 or later, or to 7.2.3 or later.
3
Who is affected by CVE-2023-41673?
CVE-2023-41673 affects Fortinet FortiADC versions 6.0.0 to 7.4.0.
4
What kind of impact does CVE-2023-41673 have?
CVE-2023-41673 allows low privileged users to read or back up the full system configuration.
5
When was CVE-2023-41673 disclosed?
CVE-2023-41673 was disclosed on October 5, 2023.