CVE-2023-34990 CRITICAL

CVE-2023-34990

Vendor Fortinet

Product FortiWLM

Weakness CWE-23

Published December 18, 2024

Last update December 20, 2024

View on NVD All CVEs

CVSS base score

9.6/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:X

What the vulnerability does

01Description

A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specially crafted web requests.

Key dates

02Disclosure timeline

December 18, 2024 CVE published

December 20, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-34990 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/23.html

Identifiers

CVE CVE-2023-34990

CWE CWE-23

CVSS 9.6 / CRITICAL

Affected versions

Vendor Fortinet

Product FortiWLM

Affected ≥ 8.6.0 and ≤ 8.6.5

Vendor Fortinet

Product FortiWLM

Affected ≥ 8.5.0 and ≤ 8.5.4