CVE-2023-46717: Improper authentication following read-only user login

Published Mar 12, 2024

Updated

An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and versions 7.0.12 and below when configured with FortiAuthenticator in HA may allow a readonly user to gain read-write access via successive login attempts.

Other sources

An improper authentication vulnerability [CWE-287] in FortiOS when configured with FortiAuthenticator in HA may allow an authenticated attacker with at least read-only permission to gain read-write access via successive login attempts.

— FortiGuard

Affected Software

3 affected components

Fortinet FortiOS>=7.0.0<7.0.13

Fortinet FortiOS>=7.2.0<7.2.7

Fortinet FortiOS>=7.4.0<7.4.2

Remediation

Information

Please upgrade to FortiOS 7.4.2 or above Please upgrade to FortiOS 7.2.7 or above Please upgrade to ForitOS 7.0.13 or above Workaround- Disable push notifications for FortiAuthenticator: For RADIUS Authentication (From FortiAuthenticator)- ## RADIUS Service > Policies > (select policy) > Authentication Factors > Advanced Options > ## Allow FortiToken Mobile push notifications (*disable)*

Event History

Mar 12, 2024

Advisory Published

via FortiGuard·12:00 AM

Data Sourced

via FortiGuard·12:00 AM

DescriptionSeverityWeaknessAffected Software

CVE Published

via MITRE·03:09 PM

Data Sourced

via MITRE·03:09 PM

RemedyDescriptionSeverityWeakness

Mar 13, 2024

News Published

via The Register·12:16 AM

News Published

via The Register·12:19 AM

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2023-46717?

CVE-2023-46717 is classified as a high severity vulnerability due to its potential to allow unauthorized read-write access.

How do I fix CVE-2023-46717?

To fix CVE-2023-46717, upgrade FortiOS to versions 7.0.13, 7.2.7, or 7.4.2 or above.

What systems are affected by CVE-2023-46717?

CVE-2023-46717 affects FortiOS versions 7.4.1 and below, 7.2.6 and below, and 7.0.12 and below when configured with FortiAuthenticator in HA.

What type of vulnerability is CVE-2023-46717?

CVE-2023-46717 is an improper authentication vulnerability categorized under CWE-287.

Can a readonly user escalate privileges due to CVE-2023-46717?

Yes, a readonly user may gain unauthorized read-write access through repeated login attempts due to CVE-2023-46717.