VDB

CVE-2023-26205

CVE-2023-26205 PUBLISHED CVSS 5.300000190734863 MEDIUM

An improper access control vulnerability [CWE-284] in FortiADC automation feature 7.1.0 through 7.1.2, 7.0 all versions, 6.2 all versions, 6.1 all versions may allow an authenticated low-privileged attacker to escalate their privileges to super_admin via a specific crafted configuration of fabric automation CLI script.

EPSS 0.58% · 45.5th percentile

Risk Scores

CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:F/RL:X/RC:C
EPSS Score
0.58%
45.5th percentile

Affected Products

VendorProductVersions
fortinetfortiadc6.1.0, 6.2.0, 7.0.0
FortinetFortiMail6.4.0, 6.2.0, 6.0.0

Timeline

  • Nov 14, 2023 CVE Published
  • Nov 15, 2023 EPSS Score
  • Dec 16, 2023 EPSS Score
  • Jan 15, 2024 EPSS Score
  • Feb 15, 2024 EPSS Score
  • Mar 16, 2024 EPSS Score
  • Apr 16, 2024 EPSS Score
  • May 16, 2024 EPSS Score
  • Jun 16, 2024 EPSS Score
  • Jul 16, 2024 EPSS Score
  • Aug 16, 2024 EPSS Score
  • Sep 16, 2024 EPSS Score

References

…and 2 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›