VYPR
← All advisories
High severity7.1NVD Advisory· Published Dec 13, 2023· Updated Jun 17, 2026

CVE-2023-41673

CVE-2023-41673

Description

An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS requests.

Affected products

8
  • Fortinet/Fortiadc 200d7 versions
    cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.0.4
    • cpe:2.3:a:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc:7.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc:7.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*
    • (no CPE)range: 7.4.0
  • Fortinet/FortiADC-Ellm-fuzzy
    Range: <=7.4.0 and <7.2.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.