FG-IR-23-396: Readonly users could run some sensitive operations
A client-side enforcement of server-side security vulnerability [CWE-602] in FortiAnalyzer may allow an authenticated attacker with at least read-only permission to execute sensitive operations via crafted requests.
Affected Software
Event History
Frequently Asked Questions
What is the severity of FG-IR-23-396?
The vulnerability FG-IR-23-396 is classified as a client-side enforcement of server-side security issue that allows authenticated attackers to execute sensitive operations.
How do I fix FG-IR-23-396?
To fix FG-IR-23-396, upgrade your FortiAnalyzer or FortiManager to the specified remedial versions: FortiAnalyzer to 7.4.3, 7.2.6, 7.0.13, or 6.4.15 and FortiManager to 7.4.3, 7.2.6, 7.0.13, or 6.4.15.
Which versions are affected by FG-IR-23-396?
The affected versions of FortiAnalyzer are 7.4.0 to 7.4.2, 7.2.0 to 7.2.5, 7.0.0 to 7.0.12, and 6.4.0 to 6.4.14, while FortiManager versions are 7.4.0 to 7.4.2, 7.2.0 to 7.2.5, 7.0.0 to 7.0.12, and 6.4.0 to 6.4.14.
Who can exploit FG-IR-23-396?
An authenticated attacker with at least read-only permission can exploit the FG-IR-23-396 vulnerability.
What type of vulnerability is FG-IR-23-396?
FG-IR-23-396 is a client-side enforcement of server-side security vulnerability as classified by CWE-602.