CVE-2023-50181 MEDIUM

CVE-2023-50181

Vendor Fortinet
Product FortiADC
Weakness CWE-284
Published July 9, 2024
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:F/RL:X/RC:C

What the vulnerability does

01Description

An improper access control vulnerability [CWE-284] in Fortinet FortiADC version 7.4.0 through 7.4.1 and before 7.2.4 allows a read only authenticated attacker to perform some write actions via crafted HTTP or HTTPS requests.

Key dates

02Disclosure timeline

July 9, 2024 CVE published
August 2, 2024 Record updated