Security Advisory

CVE-2023-42787

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-10-10 16:48:46
Last updated 2025-02-13 17:09:41
Assigner fortinet
State PUBLISHED

Description

A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 may allow a remote attacker with low privileges to access a privileged web console via client side code execution.