VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jun 13, 2023· Updated Jun 17, 2026

CVE-2023-25609

CVE-2023-25609

Description

A server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer GUI 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.8 through 6.4.11 may allow a remote and authenticated attacker to access unauthorized files and services on the system via specially crafted web requests.

Affected products

10
  • Fortinet/Fortianalyzer5 versions
    cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*range: >=6.4.8,<=6.4.11
    • cpe:2.3:a:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortianalyzer:7.2.1:*:*:*:*:*:*:*
    • (no CPE)range: 7.2.0 - 7.2.1, 7.0.0 - 7.0.6, 6.4.8 - 6.4.11
    • (no CPE)range: 7.2.0
  • Fortinet/Fortimanager5 versions
    cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*range: >=6.4.8,<=6.4.11
    • cpe:2.3:a:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortimanager:7.2.1:*:*:*:*:*:*:*
    • (no CPE)range: 7.2.0 - 7.2.1, 7.0.0 - 7.0.6, 6.4.8 - 6.4.11
    • (no CPE)range: 7.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.