CVE-2023-41838 MEDIUM

CVE-2023-41838

Vendor Fortinet
Product FortiAnalyzer
Weakness CWE-78
Published October 10, 2023
Last update September 18, 2024
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:F/RL:X/RC:X

What the vulnerability does

01Description

An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0 and 7.2.0 through 7.2.3 may allow attacker to execute unauthorized code or commands via FortiManager cli.

Key dates

02Disclosure timeline

October 10, 2023 CVE published
September 18, 2024 Record updated