CVE-2023-50179: Medium severity fortinet fortiadc vulnerability
An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2 all versions, 7.1 all versions, 7.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and public SDN connectors.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50179?
CVE-2023-50179 is considered a critical vulnerability due to its potential for remote and unauthenticated Man-in-the-Middle attacks.
How do I fix CVE-2023-50179?
To address CVE-2023-50179, upgrade FortiADC to version 7.4.1 or later.
What impact does CVE-2023-50179 have on FortiADC users?
Users of FortiADC may be vulnerable to attackers intercepting sensitive data transmitted through public SDN connectors.
Which versions of FortiADC are affected by CVE-2023-50179?
CVE-2023-50179 affects all versions of FortiADC from 7.0.0 up to, but not including, 7.4.1.
Is authentication required to exploit CVE-2023-50179?
No, CVE-2023-50179 can be exploited by remote and unauthenticated attackers.