VYPR
← All advisories
Low severity3.1NVD Advisory· Published Dec 13, 2023· Updated Jun 17, 2026

CVE-2023-47536

CVE-2023-47536

Description

An improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and below, version 6.4.14 and below and FortiProxy version 7.2.3 and below, version 7.0.9 and below, version 2.0.12 and below may allow a remote unauthenticated attacker to bypass the firewall deny geolocalisation policy via timing the bypass with a GeoIP database update.

Affected products

7
  • Fortinet/Fortiproxy3 versions
    cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*range: >=2.0.0,<=2.0.12
    • (no CPE)range: <=7.2.3, <=7.0.9, <=2.0.12
    • (no CPE)range: 7.2.0
  • Fortinet/Fortios4 versions
    cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*range: >=6.4.0,<=6.4.14
    • cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*
    • (no CPE)range: <=7.2.0, <=7.0.13, <=6.4.14
    • (no CPE)range: 7.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.