Vulnetix
Try Vulnetix Request Demo
CVE-2023-50181 PUBLISHED CVSS 4.800000190734863 MEDIUM

An improper access control vulnerability [CWE-284] in Fortinet FortiADC version 7.4.0 through 7.4.1 and before 7.2.4 allows a read only authenticated attacker to perform some write actions via crafted HTTP or HTTPS requests.

EPSS 0.16% · 36.9th percentile

Risk Scores

CVSS v3.1
4.800000190734863
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:F/RL:X/RC:C
EPSS Score
0.16%
36.9th percentile

Affected Products

VendorProductVersions
fortinetfortiadc7.4.0, 6.0.0
FortinetFortiADC7.1.0, 7.0.0, 6.2.0
fortinetfortiadc7.1.0, 7.0.0, 6.2.0

Timeline

References

Open in Interactive Console →