CVE-2023-50181: Medium severity fortinet fortiadc vulnerability
An improper access control vulnerability [CWE-284] in Fortinet FortiADC version 7.4.0 through 7.4.1 and before 7.2.4 allows a read only authenticated attacker to perform some write actions via crafted HTTP or HTTPS requests.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50181?
CVE-2023-50181 is considered a significant access control vulnerability that can allow unauthorized modifications by authenticated attackers.
How do I fix CVE-2023-50181?
To mitigate CVE-2023-50181, upgrade Fortinet FortiADC to version 7.4.2 or newer, or to version 7.2.4 or newer.
Who is affected by CVE-2023-50181?
CVE-2023-50181 affects Fortinet FortiADC versions from 6.0.0 up to 7.4.1 and includes both older and newer versions before 7.2.4.
What types of attacks can exploit CVE-2023-50181?
CVE-2023-50181 can be exploited by an authenticated attacker who can send specially crafted HTTP or HTTPS requests to perform unauthorized write operations.
Is there a workaround for CVE-2023-50181?
Currently, the best course of action for CVE-2023-50181 is to apply the appropriate software updates as there are no specific workarounds recommended.