CVE-2023-44254: IDOR on download logs feature
An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer & FortiManager may allow a remote attacker with low privileges to read sensitive data via a crafted HTTP request.
Other sources
An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer version 7.4.1 and before 7.2.5 and FortiManager version 7.4.1 and before 7.2.5 may allow a remote attacker with low privileges to read sensitive data via a crafted HTTP request.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-44254?
CVE-2023-44254 has a medium severity rating due to its potential for unauthorized access to sensitive data.
How do I fix CVE-2023-44254?
To fix CVE-2023-44254, update FortiAnalyzer and FortiManager to the latest versions that address this vulnerability.
What systems are affected by CVE-2023-44254?
CVE-2023-44254 affects FortiAnalyzer versions from 6.2.0 to 7.2.5 and version 7.4.0, as well as FortiManager versions from 6.2.0 to 7.2.5 and version 7.4.0.
What type of attack does CVE-2023-44254 involve?
CVE-2023-44254 involves an authorization bypass allowing remote attackers to read sensitive data through crafted HTTP requests.
Can low privilege users exploit CVE-2023-44254?
Yes, low privilege users can exploit CVE-2023-44254 to bypass authorization controls and access sensitive information.